40bf76add5
chore(go.mod): upgrade trivy and cosign ( #1387 )
...
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2023-04-27 09:35:10 -07:00
e6b81bb354
chore(go.mod): fix dependabot alerts ( #1365 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-04-12 14:10:47 +03:00
9f512082ad
chore(go.mod): fix dependabot alerts ( #1360 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-04-11 23:21:30 -07:00
8f809bda29
chore(go.mod): fix dependabot alerts ( #1351 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-04-10 14:09:54 -07:00
38997be596
chore(go.mod): fix dependabot alerts ( #1343 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-04-07 09:35:12 +03:00
06bd8a8252
chore(go.mod): fix dependabot alerts ( #1333 )
...
upgrade to github.com/aws/aws-sdk-go@v1.44.237
upgrade to github.com/aquasecurity/trivy@v0.38 .3
upgrade to oras.land/oras-go@v1.2.3
upgrade to github.com/google/go-containerregistry@v0.14 .0
upgrade to github.com/moby/buildkit@v0.11 .4
Note we can't switch to trivy 0.39.0 as well as some other updates
because they would also require upgrade of cosign to v2 with
breaking api changes
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-04-06 01:00:12 -07:00
d9173e3ad3
chore(go.mod): fix dependabot alerts ( #1330 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-04-05 09:39:15 +03:00
5ad25126b7
chore: fix dependabot alerts ( #1320 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-03-29 13:13:16 -07:00
917159143c
chore: fix dependabot alerts ( #1312 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-03-27 12:16:29 -07:00
e54c36db12
chore(go.mod): fix dependabot alerts ( #1305 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-03-25 22:43:36 +02:00
906f8ce621
chore(deps): fix dependabot alerts ( #1291 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-03-22 12:33:21 -07:00
c2bec0d4a8
chore(go.mod): fix dependabot alerts ( #1251 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-03-07 09:59:59 +02:00
73b1126bbf
chore(go.mod): fix dependabot alerts ( #1247 )
...
Supersedes:
- https://github.com/project-zot/zot/pull/1132
- https://github.com/project-zot/zot/pull/1243
- https://github.com/project-zot/zot/pull/1244
- https://github.com/project-zot/zot/pull/1245
Also update the AWS SDK libraries used
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-03-06 11:05:19 -08:00
646250736e
fix(go.mod): replace opencontainers/umoci dependency with project-stacker/umoci ( #1240 )
...
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
2023-03-05 21:11:07 -08:00
5a2fb4108d
chore(go.mod): fix dependabot alerts ( #1228 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-02-28 17:38:49 +02:00
f6a540747f
chore(go.mod): fix dependabot alerts ( #1222 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-02-23 22:32:20 +02:00
4a56e30cd7
chore(go.mod): fix dependabot alerts ( #1218 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-02-23 09:09:28 +02:00
be33f7b252
chore(go.mod): fix dependabot alerts ( #1210 )
...
* chore(go.mod): fix dependabot alerts
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
* chore(test): update image tags
We have cleaned up older golang images in the project.
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
* ci(gqlgen): fix gql schema validation GH workflow after npm upgrade
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
---------
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-02-17 13:54:49 -08:00
b9a75b2e44
chore(go.mod): fix dependabot alerts ( #1194 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-02-13 12:48:05 -08:00
ee95ab0ffc
fix: call notation-go libs instead of using notation binary ( #1104 )
...
fix: add loading notation path
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com >
Co-authored-by: Roxana Nemulescu <roxana.nemulescu@gmail.com >
2023-02-13 10:43:52 -08:00
c154ab02f3
chore(deps): fix dependabot alerts ( #1179 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-02-07 08:52:17 +02:00
863d057e43
chore(deps): fix dependabot alerts ( #1153 )
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-02-01 00:21:14 -08:00
976ccfcf0d
fix: removed references to old dist-spec ( #1128 )
...
Signed-off-by: Ana-Roberta Lisca <ana.kagome@yahoo.com >
2023-01-31 09:35:33 -08:00
b3ed92ef1a
chore(deps): fix dependabot alerts ( #1143 )
...
https://github.com/project-zot/zot/pull/1119
https://github.com/project-zot/zot/pull/1142
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-01-26 22:39:18 -08:00
0938e4704c
chore(deps): fix dependabot alerts ( #1131 )
...
Also, remove go mod redirects and update linter config.
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-01-25 10:58:39 -08:00
fac1d1d05d
chore(trivy): update trivy version and enforce OCI compliant repo names in local image storage ( #1068 )
...
1. chore(trivy): update trivy library version
The trivy team switched github.com/urfave/cli for viper so
there are some other code changes as well.
Since we don't use github.com/urfave/cli directly in our software
we needed to add a tools.go in order for "go mod tidy" to not delete it.
See this pattern explained in:
- https://github.com/99designs/gqlgen#quick-start
- https://github.com/golang/go/wiki/Modules#how-can-i-track-tool-dependencies-for-a-module
- https://github.com/go-modules-by-example/index/blob/master/010_tools/README.md#walk-through
The jobs using "go get -u" have been updated to use "go install", since go get
modifies the go.mod by upgrading some of the packages, but downgrading trivy to an older
version with broken dependencies
2. fix(storage) Update local storage to ignore folder names not compliant with dist spec
Also updated trivy to download the DB and cache results under the rootDir/_trivy folder
3. fix(s3): one of the s3 tests was missing the skipIt call
This caused a failure when running locally without s3 being available
4. make sure the offline scanning is enabled, and zot only downloads the trivy DB
on the regular schedule, and doesn't download the DB on every image scan
ci: increase build and test timeout as tests are reaching the limit more often
Signed-off-by: Andrei Aaron <aaaron@luxoft.com >
2023-01-18 08:24:44 -08:00
eebc750367
chore(deps): fix dependabot alerts ( #1115 )
...
https://github.com/project-zot/zot/pull/1112
https://github.com/project-zot/zot/pull/1113
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-01-17 09:48:58 +02:00
6ab27fcdcd
chore(deps): fix dependabot alerts ( #1098 )
...
https://github.com/project-zot/zot/pull/1094
https://github.com/project-zot/zot/pull/1095
https://github.com/project-zot/zot/pull/1096
https://github.com/project-zot/zot/pull/1097
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2023-01-10 16:17:19 -08:00
08a8b3d44c
chore(deps): fix dependabot alerts ( #1090 )
...
https://github.com/project-zot/zot/pull/1087
https://github.com/project-zot/zot/pull/1088
https://github.com/project-zot/zot/pull/1089
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-12-29 10:05:22 +02:00
271ffb53cc
chore(deps): fix dependabot alerts ( #1080 )
...
https://github.com/project-zot/zot/pull/1079
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-12-20 15:29:21 -08:00
1c9db99b0d
chore(deps): fix dependabot alerts ( #1077 )
...
https://github.com/project-zot/zot/pull/1071
https://github.com/project-zot/zot/pull/1075
https://github.com/project-zot/zot/pull/1076
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-12-20 11:59:04 -08:00
2571e8e5fc
chore(deps): fix dependabot alerts ( #1074 )
...
https://github.com/project-zot/zot/pull/1069
https://github.com/project-zot/zot/pull/1070
https://github.com/project-zot/zot/pull/1071
https://github.com/project-zot/zot/pull/1072
https://github.com/project-zot/zot/pull/1073
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-12-19 14:59:31 -08:00
2efa80d1ec
chore(deps): fix dependabot alerts ( #1060 )
...
https://github.com/project-zot/zot/pull/1057
https://github.com/project-zot/zot/pull/1058
https://github.com/project-zot/zot/pull/1059
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-12-12 14:09:34 -08:00
d78f1d962f
chore(deps): fix dependabot alerts ( #1048 )
...
https://github.com/project-zot/zot/pull/1043
https://github.com/project-zot/zot/pull/1044
https://github.com/project-zot/zot/pull/1045
https://github.com/project-zot/zot/pull/1046
https://github.com/project-zot/zot/pull/1047
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-12-06 09:09:03 -08:00
ffa223de43
chore(deps): fix dependabot alerts ( #1030 )
...
https://github.com/project-zot/zot/pull/1024
https://github.com/project-zot/zot/pull/1025
https://github.com/project-zot/zot/pull/1026
https://github.com/project-zot/zot/pull/1027
https://github.com/project-zot/zot/pull/1028
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-11-29 16:41:01 +02:00
31b9481713
feat(cache): dynamodb implementation ( #953 )
...
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com >
2022-11-22 10:29:57 -08:00
7790b944e3
chore(deps): fix dependabot alerts ( #1000 )
...
https://github.com/project-zot/zot/pull/996
https://github.com/project-zot/zot/pull/997
https://github.com/project-zot/zot/pull/998
https://github.com/project-zot/zot/pull/999
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-11-14 12:29:28 -08:00
94d073ceab
chore(deps): fix dependabot alerts ( #977 )
...
https://github.com/project-zot/zot/pull/973
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-11-08 12:59:18 -08:00
f9b575e1cf
chore(deps): fix dependabot alerts ( #965 )
...
https://github.com/project-zot/zot/pull/959
https://github.com/project-zot/zot/pull/960
https://github.com/project-zot/zot/pull/961
https://github.com/project-zot/zot/pull/962
https://github.com/project-zot/zot/pull/963
https://github.com/project-zot/zot/pull/964
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-11-08 00:39:06 -08:00
c0f93caacb
feat(artifact): add OCI references support ( #936 )
...
Thanks @jdolitsky et al for kicking off these changes at:
https://github.com/oci-playground/zot/commits/main
Thanks @sudo-bmitch for reviewing the patch
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-11-08 00:38:16 -08:00
8b345f0b27
chore(deps): fix dependabot alerts ( #945 )
...
https://github.com/project-zot/zot/pull/939
https://github.com/project-zot/zot/pull/940
https://github.com/project-zot/zot/pull/941
https://github.com/project-zot/zot/pull/942
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-11-01 11:15:26 -07:00
4edecbb429
chore(deps): fix dependabot alerts ( #919 )
...
https://github.com/project-zot/zot/pull/911
https://github.com/project-zot/zot/pull/912
https://github.com/project-zot/zot/pull/913
https://github.com/project-zot/zot/pull/914
https://github.com/project-zot/zot/pull/915
https://github.com/project-zot/zot/pull/916
https://github.com/project-zot/zot/pull/917
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-10-24 15:18:48 -07:00
7d08985f75
chore(deps): fix dependabot alerts ( #885 )
...
https://github.com/project-zot/zot/pull/879
https://github.com/project-zot/zot/pull/880
https://github.com/project-zot/zot/pull/881
https://github.com/project-zot/zot/pull/882
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-10-18 10:06:14 +03:00
5494208556
chore(deps): fix dependabot alerts ( #868 )
...
https://github.com/project-zot/zot/pull/864
https://github.com/project-zot/zot/pull/865
https://github.com/project-zot/zot/pull/866
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-10-10 12:19:05 -07:00
f235f88426
chore(deps): update dependabot dependency update alerts ( #845 )
...
https://github.com/project-zot/zot/pull/819
https://github.com/project-zot/zot/pull/841
https://github.com/project-zot/zot/pull/842
https://github.com/project-zot/zot/pull/843
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-10-03 14:33:52 -07:00
04da7fb1b7
fix dependabot alerts ( #809 )
...
https://github.com/project-zot/zot/pull/805
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-09-22 11:27:55 +03:00
e5decaa47e
fix dependabot alerts
...
https://github.com/project-zot/zot/pull/800
https://github.com/project-zot/zot/pull/801
https://github.com/project-zot/zot/pull/805
https://github.com/project-zot/zot/security/dependabot/26
https://github.com/project-zot/zot/security/dependabot/30
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-09-21 16:07:04 -07:00
7804ba7ce0
fix dependabot alerts ( #795 )
...
https://github.com/project-zot/zot/pull/778
https://github.com/project-zot/zot/pull/780
https://github.com/project-zot/zot/pull/781
https://github.com/project-zot/zot/pull/782
https://github.com/project-zot/zot/security/dependabot/27
https://github.com/project-zot/zot/security/dependabot/29
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-09-21 10:04:08 +03:00
d68bbf6743
fix security alerts from artifacthub
...
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-09-08 09:24:33 +03:00
cda1f4989d
fix dependabot alerts
...
https://github.com/project-zot/zot/pull/755
https://github.com/project-zot/zot/pull/758
https://github.com/project-zot/zot/pull/759
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com >
2022-08-29 22:28:17 -07:00
Andreea Lupu