Skip to content

Commit

Permalink
ci: use ubuntu-latest
Browse files Browse the repository at this point in the history
  • Loading branch information
DavSanchez committed May 29, 2024
1 parent f44a48a commit bc4761d
Show file tree
Hide file tree
Showing 12 changed files with 26 additions and 27 deletions.
2 changes: 1 addition & 1 deletion .github/workflows/ci-goreleaser.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ on:
jobs:
check-goreleaser:
name: Check GoReleaser Configuration
runs-on: ubuntu-20.04
runs-on: ubuntu-latest

steps:
- name: Checkout
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/ci-prerelease.yml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ jobs:
prerelease:
name: Pre-release

runs-on: ubuntu-20.04
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v3
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/ci-prerelease_linux_on_demand.yml
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ env:
jobs:
packaging:
name: Build and publish packages to custom repo
runs-on: ubuntu-20.04
runs-on: ubuntu-latest

strategy:
max-parallel: 1
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/ci-release-on-demand.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ jobs:
# release-docker:
# name: Release docker images
#
# runs-on: ubuntu-20.04
# runs-on: ubuntu-latest
#
# steps:
# - uses: actions/checkout@v3
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/ci-release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@ jobs:
release-docker:
name: Release docker images

runs-on: ubuntu-20.04
runs-on: ubuntu-latest

steps:
- uses: actions/checkout@v3
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/component_canaries.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ jobs:
infra:
name: Prepare infra

runs-on: ubuntu-20.04
runs-on: ubuntu-latest

steps:
- name: Configure AWS Credentials
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/component_canary_alerts.yml
Original file line number Diff line number Diff line change
Expand Up @@ -38,15 +38,15 @@ on:
type: string

env:
AWS_ASSUME_ROLE: 'arn:aws:iam::018789649883:role/caos-pipeline-oidc-otel-releases'
AWS_ASSUME_ROLE: "arn:aws:iam::018789649883:role/caos-pipeline-oidc-otel-releases"
ANSIBLE_FORKS: 20

permissions:
id-token: write

jobs:
provision:
runs-on: ubuntu-20.04
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/component_canary_alerts_delete.yml
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ permissions:

jobs:
provision:
runs-on: ubuntu-20.04
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v3

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/component_provision_packaging.yml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
infra:
name: Prepare infra

runs-on: ubuntu-20.04
runs-on: ubuntu-latest

steps:
- name: Configure AWS Credentials
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/component_publish.yml
Original file line number Diff line number Diff line change
Expand Up @@ -44,10 +44,10 @@ on:
type: string

env:
GPG_MAIL: '[email protected]'
GPG_MAIL: "[email protected]"
GPG_PASSPHRASE: ${{ secrets.GPG_PASSPHRASE }}
GPG_PRIVATE_KEY_BASE64: ${{ secrets.GPG_PRIVATE_KEY_BASE64 }} # base64 encoded
TAG: ${{ inputs.TAG }}
TAG: ${{ inputs.TAG }}
DOCKER_HUB_ID: ${{ secrets.DOCKER_HUB_ID }}
DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }}
SCHEMA_BRANCH: ${{ inputs.SCHEMA_BRANCH }}
Expand All @@ -67,7 +67,7 @@ env:
jobs:
publish:
name: Publish linux artifacts into s3 bucket
runs-on: ubuntu-20.04
runs-on: ubuntu-latest

strategy:
max-parallel: 1
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/component_snyk.yml
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ on:
jobs:
snyk:
name: Scheduled Snyk scanner
runs-on: ubuntu-20.04
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v3
Expand All @@ -25,7 +25,7 @@ jobs:
- name: Setup Go
uses: actions/setup-go@v5
with:
go-version: '~1.22.3'
go-version: "~1.22.3"
check-latest: true

- name: build to generate go.mod
Expand All @@ -43,7 +43,7 @@ jobs:
uses: github/codeql-action/upload-sarif@v2
if: ${{ always() }}
with:
sarif_file: 'snyk-results.sarif'
sarif_file: "snyk-results.sarif"

- name: Send notification to Slack Workflow
if: ${{ failure() }}
Expand Down
21 changes: 10 additions & 11 deletions .github/workflows/component_trivy.yml
Original file line number Diff line number Diff line change
Expand Up @@ -18,26 +18,25 @@ on:
required: true
type: string


jobs:
trivy_scanner:
name: Trivy scanner for docker
runs-on: ubuntu-20.04
runs-on: ubuntu-latest
if: ${{ ! github.event.schedule }} # Table output
steps:
- name: newrelic/nr-otel-collector
uses: aquasecurity/trivy-action@master
with:
image-ref: "${{ inputs.image }}:${{ inputs.tag }}"
format: 'table'
exit-code: '1'
format: "table"
exit-code: "1"
ignore-unfixed: true
vuln-type: 'os,library'
vuln-type: "os,library"
severity: "${{ inputs.severity }}"

trivy_scanner_scheduled:
name: Scheduled Trivy scanner for docker
runs-on: ubuntu-20.04
runs-on: ubuntu-latest
if: ${{ github.event.schedule }} # Upload sarif when running periodically
steps:
- name: Checkout
Expand All @@ -47,18 +46,18 @@ jobs:
uses: aquasecurity/[email protected]
with:
image-ref: "${{ inputs.image }}:${{ inputs.tag }}"
format: 'sarif'
output: 'trivy-results.sarif'
vuln-type: 'os,library'
format: "sarif"
output: "trivy-results.sarif"
vuln-type: "os,library"
severity: "${{ inputs.severity }}"
exit-code: '1'
exit-code: "1"
ignore-unfixed: true

- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v2
if: ${{ always() }}
with:
sarif_file: 'trivy-results.sarif'
sarif_file: "trivy-results.sarif"

- name: Send notification to Slack Workflow
if: ${{ failure() }}
Expand Down

0 comments on commit bc4761d

Please sign in to comment.