Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Sec-fixes #598

Open
wants to merge 23 commits into
base: main
Choose a base branch
from
Open

Sec-fixes #598

wants to merge 23 commits into from
+668 −1,908

Conversation

ATGardner
Copy link
Collaborator

@ATGardner ATGardner commented Oct 4, 2024 •
edited
Loading

  • update golang to 1.23
  • code.gitea.io/sdk/gitea v0.17.1 => v0.19.0
  • upgraded github.com/argoproj/argo-cd/v2 v2.10.0 => v2.13.1
  • upgraded github.com/briandowns/spinner v1.23.0 => v1.23.1
  • upgraded github.com/go-git/go-git/v5 v5.11.0 => v5.12.0
  • upgraded github.com/ktrysmt/go-bitbucket v0.9.75 => v0.9.81
  • upgraded github.com/spf13/cobra v1.8.0 => v1.8.1
  • upgraded github.com/spf13/viper v1.18.2 => v1.19.0
  • upgraded github.com/stretchr/testify v1.8.4 => v1.10.0
  • upgraded github.com/xanzy/go-gitlab v0.97.0 => v0.114.0
  • upgraded k8s.io/api v0.26.11 => v0.31.0
  • upgraded k8s.io/apimachinery v0.26.11 => v0.31.0
  • upgraded k8s.io/cli-runtime v0.26.11 => v0.31.0
  • upgraded k8s.io/client-go v0.26.11 => v0.31.0
  • upgraded k8s.io/kubectl v0.26.11 => v0.31.2
  • upgraded sigs.k8s.io/kustomize/api v0.12.1 => v0.17.2
  • upgraded sigs.k8s.io/kustomize/kyaml v0.13.9 => v0.17.1
  • replaced github.com/ghodss/yaml v1.0.0 with sigs.k8s.io/yaml v1.4.0

@ATGardner ATGardner self-assigned this Oct 4, 2024
This was referenced Oct 4, 2024
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
Closed
@ATGardner ATGardner force-pushed the sec-fixes branch 3 times, most recently from 1a82960 to 5d9f869 Compare October 4, 2024 15:12
This was referenced Oct 4, 2024
Closed
Closed
Closed
@codecov-commenter
Copy link

codecov-commenter commented Oct 4, 2024 •
edited
Loading

Codecov Report

Attention: Patch coverage is 66.66667% with 2 lines in your changes missing coverage. Please review.

Project coverage is 40.66%. Comparing base (98519df) to head (5c5ab13).

Files with missing lines Patch % Lines
cmd/commands/project.go 0.00% 1 Missing ⚠️
pkg/kube/kube.go 0.00% 1 Missing ⚠️
Additional details and impacted files 
@@            Coverage Diff             @@
##             main     #598      +/-   ##
==========================================
- Coverage   40.67%   40.66%   -0.01%     
==========================================
  Files          41       41              
  Lines        6732     6730       -2     
==========================================
- Hits         2738     2737       -1     
+ Misses       3880     3879       -1     
  Partials      114      114

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚨 Try these New Features:

@ATGardner
Copy link
Collaborator Author

/ci

2 similar comments
@ATGardner
Copy link
Collaborator Author

/ci

@ATGardner
Copy link
Collaborator Author

/ci

@ATGardner ATGardner added the security needed for prisma check label Oct 7, 2024
@ATGardner
Copy link
Collaborator Author

/ci

2 similar comments
@ATGardner
Copy link
Collaborator Author

/ci

@ATGardner
Copy link
Collaborator Author

/ci

@ATGardner
replaced github.com/ghodss/yaml with sigs.k8s.io/yaml
51f1838 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
upgraded github.com/spf13/viper v1.18.2 => v1.19.0
f86a28a 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
updated golangci-lint to v1.61.0
acb37f0 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
fixed lint
a3e8042 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
fixed tests
ca3a607 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
ran codegen
12e9407 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
fixed typo in description
342908e 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
fix codegen sec vulns
6d32cf4 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
trying to use official snyk image
1e2d85e 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
split scan-image and scan-module steps
1c75530 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
trying to use only "container test" step
aba67a5 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
set specific version to codecov step
b07545d 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
change back to codefresh-inc/snyk-cli image
09a6a31 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
upgraded github.com/argoproj/argo-cd/v2 v2.13.0 => v2.13.1
69569ae 
Signed-off-by: Noam Gal <[email protected]>
@ATGardner
Copy link
Collaborator Author

/ci

This was referenced Nov 24, 2024
Closed
Closed
Closed
Closed
Closed
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@ATGardner ATGardner

Labels
security needed for prisma check
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@ATGardner @codecov-commenter