Skip to content

Commit

Permalink
chore(deps): update github-actions (#76)
Browse files Browse the repository at this point in the history
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
digest | `b4ffde6` -> `692973e` |
|
[aquaproj/aqua-installer](https://togithub.com/aquaproj/aqua-installer)
| action | minor | `v2.2.0` -> `v2.3.2` |

---

### Release Notes

<details>
<summary>aquaproj/aqua-installer (aquaproj/aqua-installer)</summary>

###
[`v2.3.2`](https://togithub.com/aquaproj/aqua-installer/releases/tag/v2.3.2)

[Compare
Source](https://togithub.com/aquaproj/aqua-installer/compare/v2.3.1...v2.3.2)

[#&#8203;607](https://togithub.com/aquaproj/aqua-installer/issues/607)
export environment variable `AQUA_DISABLE_COSIGN` and
`AQUA_DISABLE_SLSA`


[https://github.com/aquaproj/aqua/issues/2759](https://togithub.com/aquaproj/aqua/issues/2759)

To disable Cosign and slsa-verifier on subsequent steps.

###
[`v2.3.1`](https://togithub.com/aquaproj/aqua-installer/releases/tag/v2.3.1)

[Compare
Source](https://togithub.com/aquaproj/aqua-installer/compare/v2.3.0...v2.3.1)

[#&#8203;605](https://togithub.com/aquaproj/aqua-installer/issues/605)
Disable Cosign and slsa-verifier

Until we will finish upgrading Cosign to v2, we disable Cosign and
slsa-verifier.


[https://github.com/aquaproj/aqua/issues/1665#issuecomment-2008588288](https://togithub.com/aquaproj/aqua/issues/1665#issuecomment-2008588288)

###
[`v2.3.0`](https://togithub.com/aquaproj/aqua-installer/releases/tag/v2.3.0)

[Compare
Source](https://togithub.com/aquaproj/aqua-installer/compare/v2.2.0...v2.3.0)


[Issues](https://togithub.com/aquaproj/aqua-installer/issues?q=is%3Aissue+milestone%3Av2.3.0)
| [Pull
Requests](https://togithub.com/aquaproj/aqua-installer/pulls?q=is%3Apr+milestone%3Av2.3.0)
| aquaproj/aqua-installer@v2.2.0...v2.3.0

#### Features

[#&#8203;580](https://togithub.com/aquaproj/aqua-installer/issues/580)
Support disabling the verification with Cosign and SLSA Provenance

> \[!CAUTION]
> This feature is for users who can't use Cosign and slsa-verifier.
> Most users can use them, so most users don't need this feature.
> aqua installs Cosign and slsa-verifier internally, so you don't need
to install them yourself.
> If you can use Cosign and slsa-verifier, you should not disable them
because they are important for security.

The bootstrap version is updated to [aqua
v2.22.0](https://togithub.com/aquaproj/aqua/releases/tag/v2.22.0).
From this version, [aqua supports disabling the verification with Cosign
and SLSA
Provenance](https://aquaproj.github.io/docs/reference/security/cosign-slsa#disable-the-verification-with-cosign-and-slsa-provenance).

To disable the verification with Cosign and SLSA Provenance when you
install aqua with aqua-installer,
please set the environment variables `AQUA_DISABLE_COSIGN` and
`AQUA_DISABLE_SLSA`.

```sh
export AQUA_DISABLE_COSIGN=true
export AQUA_DISABLE_SLSA=true
./aqua-installer
```

```yaml
- uses: aquaproj/[email protected]
  with:
    aqua_version: v2.22.0
  env:
    AQUA_DISABLE_COSIGN: "true"
    AQUA_DISABLE_SLSA: "true"
```

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekday" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/DelineaXPM/terraform-provider-dsv).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTMuMiIsInVwZGF0ZWRJblZlciI6IjM3LjM5My4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
  • Loading branch information
renovate[bot] authored Jul 1, 2024
1 parent 1404859 commit 21dd57e
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -24,14 +24,14 @@ jobs:
runs-on: ubuntu-latest
timeout-minutes: 15
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4

# https://github.com/magnetikonline/action-golang-cache
- name: Setup Golang with cache
uses: magnetikonline/action-golang-cache@777394c89f8ed6fcf1649505277c46c1cd06494d # v4
with:
go-version-file: go.mod
- uses: aquaproj/aqua-installer@928a2ee4243a9ee8312d80dc8cbaca88fb602a91 # v2.2.0
- uses: aquaproj/aqua-installer@fd2089d1f56724d6456f24d58605e6964deae124 # v2.3.2
with:
aqua_version: v2.29.0
enable_aqua_install: true
Expand Down

0 comments on commit 21dd57e

Please sign in to comment.