-
Notifications
You must be signed in to change notification settings - Fork 87
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Align the Go version and update Go to 1.23 #272
Conversation
@@ -1,7 +1,6 @@ | |||
module github.com/viaduct-ai/kustomize-sops | |||
|
|||
go 1.22 | |||
toolchain go1.22.9 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
result of go mod tidy
@@ -35,7 +35,8 @@ jobs: | |||
- name: Set up Go | |||
uses: actions/setup-go@v5 | |||
with: | |||
go-version: 1.21 | |||
go-version-file: go.mod |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
automatically take the version from go.mod
This will also prevent things from running out of sync like currently is the situation.
@@ -14,17 +14,17 @@ jobs: | |||
strategy: | |||
matrix: | |||
os: [ubuntu-latest] | |||
go: [1.21] |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
As only one version is tested, removed the matrix for this and leverage the go.mod file to run with the version as defined in there, preventing duplication of the go version in various places that ran out of sync.
@devstein can you help out reviewing this and getting this in? I'm planning on more optimizations to get rid of CVEs and better Docker image. |
Thank you @marcofranssen! I missed these notifications |
Helps with #271 as well. Trying to cleanup the image, build process and get bit of control on vulnerabilities in the image.