37e6c6db0e
ci: remove superfluous parts of github workflows ( #1050 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-12-07 12:46:50 -08:00
69f0cf6bb4
fix(config): warn if cve is used with remote storage driver ( #1034 )
...
* fix(config): warn if cve is used with remote storage driver
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
* fix: also check if search is enabled
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
Co-authored-by: Catalin Hofnar <catalin.hofnar@gmail.com >
2022-11-30 09:35:06 +02:00
31b9481713
feat(cache): dynamodb implementation ( #953 )
...
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
2022-11-22 10:29:57 -08:00
97e7f7f756
build: move build artifacts into build/ ( #986 )
...
Unclutter the root dir by moving all docker/stacker build artifacts into
build/ folder.
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-11-10 12:09:39 -08:00
f9b575e1cf
chore(deps): fix dependabot alerts ( #965 )
...
https://github.com/project-zot/zot/pull/959
https://github.com/project-zot/zot/pull/960
https://github.com/project-zot/zot/pull/961
https://github.com/project-zot/zot/pull/962
https://github.com/project-zot/zot/pull/963
https://github.com/project-zot/zot/pull/964
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-11-08 00:39:06 -08:00
11ec261df6
refactor: changed github issue templates to yml form ( #949 )
...
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
2022-11-01 11:28:34 -07:00
4edecbb429
chore(deps): fix dependabot alerts ( #919 )
...
https://github.com/project-zot/zot/pull/911
https://github.com/project-zot/zot/pull/912
https://github.com/project-zot/zot/pull/913
https://github.com/project-zot/zot/pull/914
https://github.com/project-zot/zot/pull/915
https://github.com/project-zot/zot/pull/916
https://github.com/project-zot/zot/pull/917
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-10-24 15:18:48 -07:00
92d97d48d6
fix(s3): remove tracking multipart uploads ( #883 )
...
Remove sticky sessions from clustering
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2022-10-20 09:36:58 -07:00
d93c68af33
test: Build images with annotations ( #872 )
...
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
2022-10-18 20:47:41 -07:00
794a4aabd3
fix(workflow): add fetch depth, removed running at release ( #873 )
...
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
2022-10-17 10:41:53 -07:00
14954596cb
ci: fix image build/release workflow ( #874 )
...
Fix typo in the workflow.
Pass RELEASE_TAG env var.
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-10-15 11:14:15 +03:00
f3b1913fbd
build: add commit hash to Config at build for proper discovery readme ( #854 )
...
* build: add commit hash to Config at build for proper discovery readme link
* fix: use tag instead of commit hash, add to release build
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
2022-10-11 09:01:59 -07:00
5494208556
chore(deps): fix dependabot alerts ( #868 )
...
https://github.com/project-zot/zot/pull/864
https://github.com/project-zot/zot/pull/865
https://github.com/project-zot/zot/pull/866
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-10-10 12:19:05 -07:00
98854337ff
build(tags): remove redundant build tag ui_base ( #857 )
...
It was not used for UI, it had become a CLI dependency
with the same functionality as search
Signed-off-by: Andrei Aaron <andaaron@cisco.com >
2022-10-10 15:05:55 +03:00
9916449d88
ci(workflows): changed ci-cd workflow to generate introspection json when gql schema changed ( #810 )
...
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
2022-10-06 12:17:41 -07:00
33a431ef43
Update go version to 1.19 ( #829 )
...
* ci: Update go version to 1.19
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
* ci: Fix lint issues
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
* ci: Added needprivileges to lint, made needprivileges pass lint
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
Co-authored-by: Catalin Hofnar <catalin.hofnar@gmail.com >
2022-10-05 13:21:14 +03:00
65df973f70
fix(ci/cd): update the commit msg checker settings ( #846 )
...
Update the checker to check for length limits and against all commits.
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-10-04 09:56:07 +03:00
f235f88426
chore(deps): update dependabot dependency update alerts ( #845 )
...
https://github.com/project-zot/zot/pull/819
https://github.com/project-zot/zot/pull/841
https://github.com/project-zot/zot/pull/842
https://github.com/project-zot/zot/pull/843
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-10-03 14:33:52 -07:00
bd9e6fc7e3
Removed swagger requirement from binary-minimal and binary ( #838 )
...
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
2022-10-03 09:53:44 -07:00
f658ef66ee
style(ci/cd): add a commit msg style checker ( #796 )
...
https://www.conventionalcommits.org/en/v1.0.0-beta.4/#summary
The commit message should be structured as follows:
<type>[optional scope]: <description>
[optional body]
[optional footer]
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-09-30 16:08:23 -07:00
18d17f5d4c
also sync golang 1.19 ( #826 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-09-27 11:31:54 -07:00
b919279eef
dco: enable DCO checks only on PRs ( #812 )
...
GitHub allows a "Squash and Merge" model which does an automatic rebase
but commit GPG signature is from GitHub. So disable DCO checks only when
merging.
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-09-22 20:13:53 +03:00
e5decaa47e
fix dependabot alerts
...
https://github.com/project-zot/zot/pull/800
https://github.com/project-zot/zot/pull/801
https://github.com/project-zot/zot/pull/805
https://github.com/project-zot/zot/security/dependabot/26
https://github.com/project-zot/zot/security/dependabot/30
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-09-21 16:07:04 -07:00
7804ba7ce0
fix dependabot alerts ( #795 )
...
https://github.com/project-zot/zot/pull/778
https://github.com/project-zot/zot/pull/780
https://github.com/project-zot/zot/pull/781
https://github.com/project-zot/zot/pull/782
https://github.com/project-zot/zot/security/dependabot/27
https://github.com/project-zot/zot/security/dependabot/29
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-09-21 10:04:08 +03:00
3bccea7aa2
oras fix:
...
newer version of oras: https://github.com/oras-project/oras/releases/tag/v0.14.0
rename the --manifest-config to --config for push command
Signed-off-by: Roxana Nemulescu <roxana.nemulescu@gmail.com >
2022-08-30 21:39:16 +03:00
5dda12b6a7
Fix syntax errors in benchmark and cluster workflows
...
Signed-off-by: Andrei Aaron <andaaron@cisco.com >
2022-08-30 19:20:56 +03:00
8ed34608e4
GetCatalog() - Populate _catalog with mix of many small, medium and large images
...
Signed-off-by: Roxana Nemulescu <roxana.nemulescu@gmail.com >
2022-08-30 16:48:38 +03:00
f9f388f32e
fix artifact upload action in github workflow
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-08-24 10:04:34 +03:00
5c01c4eab4
support OCI image index at manifest endpoint ( #638 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-08-20 11:18:48 +03:00
a702a2377e
Remove AllowReadOnly and ReadOnly
...
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
Remove check and set header every time
Signed-off-by: Nicol Draghici <idraghic@cisco.com >
2022-08-10 14:27:21 -07:00
903460c55c
Fix permissions for image sync and stale workflows
...
Looks like read|write is not a correct value:
https://github.com/project-zot/zot/actions/runs/2743961177
https://github.com/project-zot/zot/actions/runs/2743965531
Write should include both, so let's try to use that.
Signed-off-by: Andrei Aaron <andaaron@cisco.com >
2022-07-27 17:44:08 +00:00
87fc941b3c
image level lint: enforce manifest mandatory annotations
...
closes #536
Signed-off-by: Lisca Ana-Roberta <ana.kagome@yahoo.com >
2022-07-27 11:48:04 +03:00
3d72dad507
fix dependabot alerts
...
https://github.com/project-zot/zot/pull/674
https://github.com/project-zot/zot/pull/676
https://github.com/project-zot/zot/pull/677
https://github.com/project-zot/zot/pull/678
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-07-27 08:48:51 +03:00
7182e426a7
Fix typos in workflow permissions
...
Signed-off-by: Andrei Aaron <andaaron@cisco.com >
2022-07-26 10:40:51 -07:00
4a3c0073b7
add a github workflow to report branch coverage
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-07-20 22:43:55 -07:00
317064ffc9
fix dependabot alerts
...
https://github.com/project-zot/zot/pull/647
https://github.com/project-zot/zot/pull/648
https://github.com/project-zot/zot/pull/649
https://github.com/project-zot/zot/pull/650
https://github.com/project-zot/zot/pull/651
https://github.com/project-zot/zot/pull/652
https://github.com/project-zot/zot/pull/653
https://github.com/project-zot/zot/pull/656
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-07-18 14:59:27 -07:00
43160dcc43
Update to graphql 1.17.13
...
We encountered some problems with using the existing folder structure,
but it looks like running the tooling with the latest versions works after
we regenerated the project using 'gql init' and refactoring to separate
the login previously in resolvers.go.
- the autogenerated code is now under the gql_generated folder
- the file resolvers.go now contains only the code which is not
rewritten by the gqlgen framework
- the file schema.resolvers.go is rewritten when gqlgen runs,
and we'll only keep there the actual resolvers matching query names
Changes we observed to schema.resolvers.go when gqlgen runs include
reordering methods, and renaming function parameters to match the
names used in schema.graphql
- we now have a gqlgen.yaml config file which governs the behavior of
gqlgen (can be tweaked to restructure the folder structure of the
generated code in the future)
Looks like the new graphql server has better validation
1 Returns 422 instead of 200 for missing query string - had to update tests
2 Correctly uncovered an error in a test for a bad `%` in query string.
As as result of 2, a `masked` bug was found in the way we check if images are
signed with Notary, the signatures were reasched for with the media type
of the image manifest itself instead of the media type for notation.
Fixed this bug, and improved error messages.
This bug would have also been reproducible with main branch if the bad `%`
in the test would have fixed.
Updated the linter to ignore some issues with the code which is
always rewritten when running:
`go run github.com/99designs/gqlgen@v0.17.13 generate`
Add a workflow to test gqlgen works and has no uncommitted changes
Signed-off-by: Andrei Aaron <andaaron@cisco.com >
2022-07-18 12:55:40 -07:00
76b811b029
harden github action/workflow perms
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-07-18 01:05:09 -07:00
595e1bca59
fix dependabot alerts
...
https://github.com/project-zot/zot/pull/624
https://github.com/project-zot/zot/pull/625
https://github.com/project-zot/zot/pull/626
https://github.com/project-zot/zot/pull/627
https://github.com/project-zot/zot/pull/628
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-07-15 12:03:08 -07:00
19434af3c4
fix dependabot.yml
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-07-13 13:18:01 -07:00
dc97096502
restrict workflow action permissions
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-07-13 11:34:57 -07:00
8da34d5751
Rename push token
...
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2022-07-13 09:05:06 -07:00
01d742718f
ci/cd: fix oras cli flags after it got updated
...
installing notation and oras not needed anymore
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2022-07-12 10:02:51 -07:00
26f85ab195
Update automatically helm chart when publish a new release for zot
...
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2022-07-11 11:27:05 -07:00
9cfed4bb46
Create scorecards.yml
...
Add ossf/scorecards action
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-07-10 22:32:00 -07:00
ada21ed842
Manage builds with different combinations of extensions
...
Files were added to be built whether an extension is on or off.
New build tags were added for each extension, while minimal and extended disappeared.
added custom binary naming depending on extensions used and changed references from binary to binary-extended
added automated blackbox tests for sync, search, scrub, metrics
added contributor guidelines
Signed-off-by: Alex Stan <alexandrustan96@yahoo.ro >
2022-06-30 09:53:52 -07:00
a04f870a22
Periodically sync golang image from dockerhub to ghcr.io
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2022-06-16 23:42:50 -07:00
66484c8ca9
changed go version to 1.18
...
Signed-off-by: Alex Stan <alexandrustan96@yahoo.ro >
2022-06-09 04:38:06 -07:00
d0b52612a2
ci/cd: Fix arm builds, use distroless final image
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2022-05-30 10:38:55 -07:00
ad08c08986
cluster: use zb source ips pool to distribute requests to cluster
...
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com >
2022-05-24 15:19:23 -07:00
Ramkumar Chinchani