STACKITGit/cli
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
7602 commits 87 branches 0 tags 160 MiB
Commit graph

7602 commits

This branch
This branch
All branches
Author SHA1 Message Date
Andy Feller
f71d3f75e3
Merge pull request #9222 from cli/dependabot/github_actions/actions/attest-build-provenance-1.3.2 2024-06-21 17:55:48 -04:00
dependabot[bot]
651d7135dc
build(deps): bump actions/attest-build-provenance from 1.2.0 to 1.3.2 
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1.2.0 to 1.3.2.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](49df96e17e...bdd51370e0)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-18 14:40:06 +00:00
Forrin
c572383bda
Attestation Verification - Buffer Fix (#9198) 
* swap scanner to readline for attestations
* replace readLine with readBytes
 2024-06-14 13:55:58 -04:00
Andy Feller
5e7ba54b56
Merge pull request #9162 from joshuajtward/chore/GH-9038 
feat: add `-a` flag to `gh run list`
 2024-06-13 11:40:08 -04:00
Andy Feller
6190e269a0 Add gh run list tests for workflow selector 
This commit adds tests to ensure disabled workflows are outputted as expected when called by name and the appropriate flags.
 2024-06-13 11:30:38 -04:00
Wing
f647131e1d
Gracefully degrade when fetching annotations fails due to 403 (#9113) 
Co-authored-by: William Martin <williammartin@github.com>
 2024-06-13 14:33:06 +02:00
Josh Ward
c2f2753051 add comment to call out potentially brittle use of workflowShared 2024-06-13 09:24:18 +01:00
Andy Feller
04d0ec0e8c
Merge pull request #9197 from cli/dependabot/go_modules/google.golang.org/protobuf-1.34.2 
build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
 2024-06-12 11:18:23 -04:00
Andy Feller
7d36c2d51f
Merge pull request #9192 from cli/dependabot/go_modules/github.com/gorilla/websocket-1.5.2 
build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2
 2024-06-12 11:01:33 -04:00
Andy Feller
7cd4a15e7c
Merge pull request #9175 from cli/dependabot/github_actions/goreleaser/goreleaser-action-6 
build(deps): bump goreleaser/goreleaser-action from 5 to 6
 2024-06-12 10:55:12 -04:00
dependabot[bot]
945b6682c8
build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 
Bumps google.golang.org/protobuf from 1.34.1 to 1.34.2.

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-11 14:22:24 +00:00
dependabot[bot]
1a470b3df8
build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.2 
Bumps [github.com/gorilla/websocket](https://github.com/gorilla/websocket) from 1.5.1 to 1.5.2.
- [Release notes](https://github.com/gorilla/websocket/releases)
- [Commits](https://github.com/gorilla/websocket/compare/v1.5.1...v1.5.2)

---
updated-dependencies:
- dependency-name: github.com/gorilla/websocket
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-10 14:55:11 +00:00
William Martin
e36d8f103d
Merge pull request #9169 from cli/dependabot/github_actions/actions/attest-build-provenance-1.2.0 
build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0
 2024-06-10 15:20:15 +02:00
William Martin
6f558c9e0a
Merge pull request #9179 from AlanD20/bump-go-keyring 
Bump go-keyring to fix keepassxc prompt confirmation
 2024-06-07 10:35:15 +02:00
AlanD20
e91860d3e9
Bump go-keyring to fix keepassxc prompt confirmation 2024-06-07 09:07:53 +02:00
dependabot[bot]
d666248104
build(deps): bump goreleaser/goreleaser-action from 5 to 6 
Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 5 to 6.
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v5...v6)

---
updated-dependencies:
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-05 14:34:35 +00:00
Phill MV
58b459fda5
Merge pull request #9172 from cli/phillmv/fix-small-verify-flag-bug 
Replace `--json-result` flag with `--format=json` in the attestation cmd
 2024-06-04 16:37:41 -04:00
Phill MV
e8a13cfed3 replaced deprecated --json-result flag with --format=json in the gh at docstring. 2024-06-04 15:52:54 -04:00
dependabot[bot]
215456e8ae
build(deps): bump actions/attest-build-provenance from 1.1.2 to 1.2.0 
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1.1.2 to 1.2.0.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](173725a120...49df96e17e)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-06-04 14:47:16 +00:00
Josh Ward
a10e532898 feat: add -a flag to gh run list 2024-06-03 09:53:34 +01:00
Andy Feller
31a9d083bd
Merge pull request #9151 from hbenali/fix-fedora 
Docs: Specify rpm repository to avoid conflicts with community repositories
 2024-05-30 12:29:36 -04:00
Houssem Ben Ali
fc8b86b4c8
Specify rpm repository to avoid conflicts with community repositories 2024-05-30 17:31:09 +02:00
Meredith Lancaster
cd5562f5ac
Add signer-repo and signer-workflow flags to gh attestation verify (#9137) 
* add signer-repo and signer-workflow flags

Signed-off-by: Meredith Lancaster <malancas@github.com>

* add check for SignerRepo option

Signed-off-by: Meredith Lancaster <malancas@github.com>

* add helper function and comment for clarity

Signed-off-by: Meredith Lancaster <malancas@github.com>

* update flag comment

Signed-off-by: Meredith Lancaster <malancas@github.com>

* reference correct field

Signed-off-by: Meredith Lancaster <malancas@github.com>

* move function to more relevant file

Signed-off-by: Meredith Lancaster <malancas@github.com>

* Update pkg/cmd/attestation/verify/verify.go

Co-authored-by: Zach Steindler <steiza@github.com>

* Update pkg/cmd/attestation/verify/verify.go

Co-authored-by: Zach Steindler <steiza@github.com>

* make all reusable workflow flags mutually exclusive

Signed-off-by: Meredith Lancaster <malancas@github.com>

* accept signer workflow without host

Signed-off-by: Meredith Lancaster <malancas@github.com>

* support client optionally providing host with signer workflow flag

Signed-off-by: Meredith Lancaster <malancas@github.com>

* comment

Signed-off-by: Meredith Lancaster <malancas@github.com>

* add tests for parsing signer workflow

Signed-off-by: Meredith Lancaster <malancas@github.com>

---------

Signed-off-by: Meredith Lancaster <malancas@github.com>
Co-authored-by: Zach Steindler <steiza@github.com>
 2024-05-30 07:40:55 -06:00
William Martin
22991ab6be
Merge pull request #9143 from cli/andyfeller-patch-1 
Ensure signed RPMs have attestations
 2024-05-30 10:53:18 +02:00
Andy Feller
fe880a3015
Ensure signed RPMs have attestations 
Thanks to @malancas for highlighting issue ordering of RPM signing and attestations!  Now, all artifacts should have attestations appropriately generated
 2024-05-29 16:18:18 -04:00
Andy Feller
faef2ddd81
Merge pull request #9140 from cli/andyfeller/cli-9139-sign-pkg-predocs 
Clarify Mac OS Installer packages are unsigned
 2024-05-29 10:43:36 -04:00
Andy Feller
2bb99001cd Clarify Mac OS Installer packages are unsigned 
Relates #9139

This commit clarifies Mac OS Installer packages are unsigned due to additional work to obtain an Apple Developer ID Installer-signing identity.
 2024-05-29 10:31:39 -04:00
William Martin
3620e791dc
Merge pull request #9136 from cli/wm/fix-pkgmacos-completions 
Build completions during release on macos
 2024-05-29 10:55:51 +02:00
William Martin
f3f93c6f74 Build completions during release on macos 2024-05-28 19:08:05 +02:00
William Martin
f1dedc9abb
Merge pull request #9124 from cli/dependabot/go_modules/github.com/gabriel-vasile/mimetype-1.4.4 
build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
 2024-05-28 18:11:55 +02:00
Meredith Lancaster
e55093347c
Add build provenance for gh CLI releases (#9087) 
Signed-off-by: Meredith Lancaster <malancas@github.com>
 2024-05-28 18:10:50 +02:00
Meredith Lancaster
8d0518645f
Add integration tests for gh attestation verify shared workflow use case (#9107) 
* add initial shared workflow use case tests and test data

Signed-off-by: Meredith Lancaster <malancas@github.com>

* add more shared workflow tests

Signed-off-by: Meredith Lancaster <malancas@github.com>

* cleanup tests

Signed-off-by: Meredith Lancaster <malancas@github.com>

* pr feedback, replace shared with reusable

Signed-off-by: Meredith Lancaster <malancas@github.com>

* use demo repository with reusable workflow tests

Signed-off-by: Meredith Lancaster <malancas@github.com>

---------

Signed-off-by: Meredith Lancaster <malancas@github.com>
 2024-05-28 07:13:34 -06:00
Andy Feller
1bc3cfa460
Merge pull request #7555 from paulober/feature-macos-pkg-installer 
Add macOS pkg installer to deployment (#7554)
 2024-05-24 15:35:52 -04:00
Andy Feller
bdc40a00d4 Update readme about MacOS pkg 2024-05-24 15:26:37 -04:00
Andy Feller
279d53af98 Remove v prefix when pkgmacos is called 
Existing Mac OS release artifacts use the tag name / version in the file name but drop the `v` prefix.  This does the same for the Mac OS installer.
 2024-05-24 15:09:40 -04:00
Paul
4db87793cd
Merge branch 'trunk' into feature-macos-pkg-installer 2024-05-24 19:25:58 +02:00
paulober
f66367d342
Integrate argument array to remove duplicate code 
Signed-off-by: paulober <44974737+paulober@users.noreply.github.com>
 2024-05-24 19:20:39 +02:00
dependabot[bot]
b2fead7dff
build(deps): bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4 
Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.3 to 1.4.4.
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](https://github.com/gabriel-vasile/mimetype/compare/v1.4.3...v1.4.4)

---
updated-dependencies:
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2024-05-24 14:47:29 +00:00
paulober
27262ff5ae
Added native min os version blocking 
Signed-off-by: paulober <44974737+paulober@users.noreply.github.com>
 2024-05-24 16:15:04 +02:00
paulober
1990952a62
Fix distribution.xml + min macos version requirements 
Signed-off-by: paulober <44974737+paulober@users.noreply.github.com>
 2024-05-24 16:08:22 +02:00
paulober
74392ff654
Added make macospkg target 
Signed-off-by: paulober <44974737+paulober@users.noreply.github.com>
 2024-05-24 15:25:02 +02:00
paulober
85f424bb08
Fix directory already exists 
Signed-off-by: paulober <44974737+paulober@users.noreply.github.com>
 2024-05-24 15:19:54 +02:00
Arne Jørgensen
08a5589abe
Add a gh variable get FOO command (#9106) 
Closes #9103.

---------

Co-authored-by: William Martin <williammartin@github.com>
 2024-05-23 17:11:53 +02:00
William Martin
99568e6345
Merge pull request #9115 from anda3/feature/nonascii-path-regex-improvement 2024-05-23 12:14:01 +02:00
William Martin
a66a646ca5 Add comment to pr diff regex 2024-05-23 11:59:56 +02:00
Katsuhiko Anda
e5e5c4fc43 Update regex in changedFilesNames to handle quoted paths 2024-05-23 03:13:16 +00:00
cawfeecake
105bafd2ec
fix: rename the Attempts field to Attempt; expose in gh run view and gh run ls (#8905) 
Co-authored-by: William Martin <williammartin@github.com>
 2024-05-22 14:39:13 +02:00
paulober
9454d5e71c
Change minimum build script macOS version 
Signed-off-by: paulober <44974737+paulober@users.noreply.github.com>
 2024-05-22 01:47:48 +02:00
paulober
3830c3356c
Cleanup pkgmacos build script 
Signed-off-by: paulober <44974737+paulober@users.noreply.github.com>
 2024-05-22 01:43:16 +02:00
paulober
18f41db31a
Removed redundant specifications 
Signed-off-by: paulober <44974737+paulober@users.noreply.github.com>
 2024-05-22 00:27:29 +02:00