Commit Graph

185 Commits

Author SHA1 Message Date
Wang Yan 647842f419
[cherry-pick] udpate storage to s3 (#21999) (#22002)
Build Package Workflow / BUILD_PACKAGE (push) Has been cancelled Details
Code scanning - action / CodeQL-Build (push) Has been cancelled Details
udpate storage to s3 (#21999)

move the build storage from google storage to the CNCF S3 storage

Currently, we use the internal GCR to store all dev builds for nightly testing, development, and as candidates for RC and GA releases. However, this internal Google storage will no longer be available, this pull request it to move to the CNCF-hosted S3 storage.

Signed-off-by: wang yan <wangyan@vmware.com>
2025-05-19 10:56:10 +08:00
Wang Yan 4170738322
upgrade the build machine to ubuntu 22 (#21975)
Per https://github.com/actions/runner-images/issues/11101, the ububnu 20.04 is out of support. This change it up the git action machine to 22.04

Signed-off-by: wang yan <wangyan@vmware.com>
2025-05-08 14:57:53 +08:00
Wang Yan 05d5b64ff9
update trivy scan branch (#21918)
Signed-off-by: wang yan <wangyan@vmware.com>
2025-04-24 15:02:08 +08:00
dependabot[bot] 16436b37fc
chore(deps): bump actions/stale from 9.0.0 to 9.1.0 (#21446)
Bumps [actions/stale](https://github.com/actions/stale) from 9.0.0 to 9.1.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v9.0.0...v9.1.0)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: miner <yminer@vmware.com>
2025-01-23 10:54:51 +00:00
Daniel Jiang 66c98c81f1
Update assignees (#21136)
Some developers are no longer working on Harbor.
I'm removing them from assignees list.

Signed-off-by: Daniel Jiang <daniel.jiang@broadcom.com>
2024-11-19 16:17:23 +08:00
dependabot[bot] 994a8622d5
chore(deps): bump codecov/codecov-action from 4 to 5 (#21192)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 4 to 5.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2024-11-19 14:48:17 +08:00
stonezdj(Daojun Zhang) bccfd5fb41
Change the source of trivy-db to avoid 429 error (#21183)
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2024-11-15 03:30:04 +00:00
miner d39d979736
remove slack notification (#21185)
Signed-off-by: yminer <miner.yang@broadcom.com>
Co-authored-by: yminer <miner.yang@broadcom.com>
2024-11-14 14:07:38 +08:00
stonezdj(Daojun Zhang) a0d27d32cc
Update image tag for nightly-trivy-scan (#21165)
Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2024-11-12 13:34:41 +08:00
Wang Yan 91082af39f
fix release script (#21100)
since we wil not ship the asc files since v2.12, it needs to remove the stesp to handle signatures.

Signed-off-by: wang yan <wangyan@vmware.com>
2024-10-28 07:14:07 +00:00
Wang Yan 6c394232b6
fix build package issue (#21087)
Signed-off-by: wang yan <wangyan@vmware.com>
2024-10-24 16:48:58 +08:00
Wang Yan bfa67a7d61
temporary disable gpg sign (#21085)
to avoid blocking the rc, let's temporary disable the gpg sign for development build since the key was expired at Oct 21.
I will fix it after RC and revert the code change

Signed-off-by: wang yan <wangyan@vmware.com>
2024-10-24 15:19:42 +08:00
Wang Yan de281220b5
update golang version (#21014)
* update golang version

to golang v1.23.2

Signed-off-by: wang yan <wangyan@vmware.com>
2024-10-10 13:36:18 +08:00
Shengwen YU 753c765101
fix: add quote to dockerhub cred (#20693)
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2024-07-15 16:51:12 +08:00
stonezdj(Daojun Zhang) e960711579
Use internal registry url to push artifact accessory (#20575)
fixes #20565

Signed-off-by: stonezdj <stone.zhang@broadcom.com>
2024-06-14 17:10:52 +08:00
Shengwen YU 1c9cb2e253
fix: update image tag for nightly-trivy-scan (#20574)
Signed-off-by: Shengwen Yu <yshengwen@vmware.com>
2024-06-12 13:54:14 +08:00
MinerYang 2da4d5883f
bump golang 1.22.3 (#20433)
* bump golang 1.22.3

Signed-off-by: yminer <yminer@vmware.com>

* debug api_common_install.sh

Signed-off-by: yminer <yminer@vmware.com>

* remove set DNS for docker v20

Signed-off-by: yminer <yminer@vmware.com>

---------

Signed-off-by: yminer <yminer@vmware.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2024-05-16 14:32:59 +08:00
MinerYang 7e8032b144
bump golang to 1.22.2 (#20256)
Signed-off-by: yminer <yminer@vmware.com>

replace go get to go install

update go.mod
2024-04-12 13:46:29 +08:00
MinerYang 680a6a828b
bump golang 1.21.8 on main (#20197)
bump golang 1.21.8

Signed-off-by: yminer <yminer@vmware.com>
2024-04-02 10:22:03 +08:00
dependabot[bot] ba840c20d4
Bump softprops/action-gh-release from 1 to 2 (#20115)
Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 1 to 2.
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](https://github.com/softprops/action-gh-release/compare/v1...v2)

---
updated-dependencies:
- dependency-name: softprops/action-gh-release
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2024-03-29 10:49:52 +08:00
dependabot[bot] 42256ed331
Bump kentaro-m/auto-assign-action from 1.2.6 to 2.0.0 (#19929)
Bumps [kentaro-m/auto-assign-action](https://github.com/kentaro-m/auto-assign-action) from 1.2.6 to 2.0.0.
- [Release notes](https://github.com/kentaro-m/auto-assign-action/releases)
- [Commits](https://github.com/kentaro-m/auto-assign-action/compare/v1.2.6...v2.0.0)

---
updated-dependencies:
- dependency-name: kentaro-m/auto-assign-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2024-02-04 17:41:42 +08:00
dependabot[bot] dbbc0207d9
Bump codecov/codecov-action from 3 to 4 (#19936)
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3 to 4.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2024-02-04 17:04:44 +08:00
dependabot[bot] 93d0d2982a
Bump kentaro-m/auto-assign-action from 1.2.5 to 1.2.6 (#19824)
Bumps [kentaro-m/auto-assign-action](https://github.com/kentaro-m/auto-assign-action) from 1.2.5 to 1.2.6.
- [Release notes](https://github.com/kentaro-m/auto-assign-action/releases)
- [Commits](https://github.com/kentaro-m/auto-assign-action/compare/v1.2.5...v1.2.6)

---
updated-dependencies:
- dependency-name: kentaro-m/auto-assign-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2024-01-17 17:51:07 +08:00
Yang Jiao 3d5c3df3cf
Update tag in nightly trivy scan (#19742)
Signed-off-by: Yang Jiao <yang.jiao@broadcom.com>
Co-authored-by: Yang Jiao <yang.jiao@broadcom.com>
2023-12-20 09:57:45 +00:00
dependabot[bot] 991b2a8174
Bump google-github-actions/setup-gcloud from 1 to 2 (#19696)
Bumps [google-github-actions/setup-gcloud](https://github.com/google-github-actions/setup-gcloud) from 1 to 2.
- [Release notes](https://github.com/google-github-actions/setup-gcloud/releases)
- [Changelog](https://github.com/google-github-actions/setup-gcloud/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google-github-actions/setup-gcloud/compare/v1...v2)

---
updated-dependencies:
- dependency-name: google-github-actions/setup-gcloud
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2023-12-19 18:16:29 +08:00
dependabot[bot] ac03147e08
Bump github/codeql-action from 2 to 3 (#19714)
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2 to 3.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2023-12-19 16:07:51 +08:00
MinerYang b38de22054
bump golang 1.21.5 & fix golangci-lint error (#19722)
bump golang 1.21.5

update golangci-lint && fix revive error

fix white space lint

Signed-off-by: yminer <yminer@vmware.com>
2023-12-19 09:41:26 +08:00
dependabot[bot] 2532ffe5a8
Bump actions/stale from 8.0.0 to 9.0.0 (#19689)
Bumps [actions/stale](https://github.com/actions/stale) from 8.0.0 to 9.0.0.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/stale/compare/v8.0.0...v9.0.0)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-12 17:13:03 +08:00
dependabot[bot] 66716b7826
Bump actions/setup-go from 1 to 5 (#19684)
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 1 to 5.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v1...v5)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2023-12-08 17:07:59 +08:00
dependabot[bot] eabc6f4289
Bump google-github-actions/auth from 1 to 2 (#19649)
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth) from 1 to 2.
- [Release notes](https://github.com/google-github-actions/auth/releases)
- [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google-github-actions/auth/compare/v1...v2)

---
updated-dependencies:
- dependency-name: google-github-actions/auth
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Shengwen YU <yshengwen@vmware.com>
2023-12-08 16:29:04 +08:00
dependabot[bot] 4fac10a97d
Bump actions/setup-node from 3 to 4 (#19478)
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Orlix <7236111+OrlinVasilev@users.noreply.github.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2023-11-27 15:48:21 +08:00
MinerYang 17c17ffd8e
bump golang to 1.21.4 (#19601)
Signed-off-by: yminer <yminer@vmware.com>
2023-11-21 19:23:16 +08:00
MinerYang 193b00b9e6
bump golang to 1.21.3 (#19504)
update ut mock

update go mod

Signed-off-by: yminer <yminer@vmware.com>
2023-10-31 15:01:23 +08:00
MinerYang 1f975edb9c
bump golang to 1.20.10 (#19430)
Signed-off-by: yminer <yminer@vmware.com>
2023-10-11 13:05:31 +08:00
Shijun Sun aa5d9eb143
Update the image version for trivy scan (#19264)
Signed-off-by: AllForNothing <sshijun@vmware.com>
2023-08-31 19:07:04 +08:00
Yang Jiao bd34ad560d
Bump up setup-gcloud to 430.0.0 (#19116)
Bump up setup-gcloud to 430.0.0

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
2023-08-08 10:50:24 +08:00
MinerYang b8f2ef9c9e
bump golang 1.20.7 on main (#19111)
Signed-off-by: yminer <yminer@vmware.com>
2023-08-07 15:40:44 +08:00
MinerYang e1c1f5625d
bump golang 1.20.6 on main (#19066)
bump golang 1.20.6

Signed-off-by: yminer <yminer@vmware.com>
2023-08-02 11:01:32 +08:00
dependabot[bot] 31a46a16cc
chore(deps): bump mheap/github-action-required-labels from 4 to 5 (#18805)
Bumps [mheap/github-action-required-labels](https://github.com/mheap/github-action-required-labels) from 4 to 5.
- [Release notes](https://github.com/mheap/github-action-required-labels/releases)
- [Commits](https://github.com/mheap/github-action-required-labels/compare/v4...v5)

---
updated-dependencies:
- dependency-name: mheap/github-action-required-labels
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2023-06-12 17:22:47 +08:00
Wang Yan bf7c82b9a8
remove the notary from backend (#18668)
Since harbor deprecates notary since v2.9.0, this pull request targets to remove the code related with notary.

Signed-off-by: Wang Yan <wangyan@vmware.com>
2023-05-18 18:47:42 +08:00
Yang Jiao cf1af0d450
Fix setup-gcloud fails when building package (#18682)
Fix #18681

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
2023-05-16 16:04:00 +08:00
dependabot[bot] 7b0692d698
Bump kentaro-m/auto-assign-action from 1.2.4 to 1.2.5 (#18263)
Bumps [kentaro-m/auto-assign-action](https://github.com/kentaro-m/auto-assign-action) from 1.2.4 to 1.2.5.
- [Release notes](https://github.com/kentaro-m/auto-assign-action/releases)
- [Commits](https://github.com/kentaro-m/auto-assign-action/compare/v1.2.4...v1.2.5)

---
updated-dependencies:
- dependency-name: kentaro-m/auto-assign-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
Co-authored-by: Orlix <OrlinVasilev@users.noreply.github.com>
2023-05-15 13:58:43 +08:00
dependabot[bot] 166eb2e4e1
Bump google-github-actions/setup-gcloud from 0 to 1 (#17772)
Bumps [google-github-actions/setup-gcloud](https://github.com/google-github-actions/setup-gcloud) from 0 to 1.
- [Release notes](https://github.com/google-github-actions/setup-gcloud/releases)
- [Changelog](https://github.com/google-github-actions/setup-gcloud/blob/main/CHANGELOG.md)
- [Commits](https://github.com/google-github-actions/setup-gcloud/compare/v0...v1)

---
updated-dependencies:
- dependency-name: google-github-actions/setup-gcloud
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Orlix <7236111+OrlinVasilev@users.noreply.github.com>
2023-05-15 13:58:07 +08:00
Yang Jiao 79d1aa05fd
Refresh the base images when building on main (#18661)
Be able to discover photon updates in time.

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
2023-05-11 14:49:22 +08:00
MinerYang 220383147e
bump golang 1.20.4 on main (#18647)
Signed-off-by: yminer <yminer@vmware.com>
2023-05-09 23:27:26 +08:00
Yang Jiao 8229134c72
Fix setup docker error (#18583)
Fix this error[https://github.com/goharbor/harbor/actions/runs/4776991336/jobs/8492390908]

Signed-off-by: Yang Jiao <jiaoya@vmware.com>
2023-04-23 19:26:17 +08:00
Yang Jiao 52d980eb46
Fix Handling skipped but required checks (#18570)
Signed-off-by: Yang Jiao <jiaoya@vmware.com>
2023-04-20 18:03:02 +08:00
Yang Jiao 9ba18f8fe6
Handling skipped but required checks (#18564)
Signed-off-by: Yang Jiao <jiaoya@vmware.com>
2023-04-20 16:33:37 +08:00
Shijun Sun d01125a4cf
Update nightly-trivy-scan.yml for the workflows (#18510)
Update nightly-trivy-scan.yml
1. Update v2.7.0-dev to v2.8.0-dev as main branch is in v2.9.0 now

Signed-off-by: AllForNothing <sshijun@vmware.com>
2023-04-11 12:55:12 +08:00
MinerYang 7afdb932b2
bump golang 1.20.3 on main (#18492)
Signed-off-by: yminer <yminer@vmware.com>
Co-authored-by: Wang Yan <wangyan@vmware.com>
2023-04-10 09:27:31 +08:00