Commit Graph

84 Commits

Author SHA1 Message Date
Quentin Gliech 66b8f31503 Bump OPA in GitHub Actions 2022-08-22 15:23:53 +02:00
dependabot[bot] 5c2bff2883 Bump actions/cache from 3.0.7 to 3.0.8
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.7 to 3.0.8.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.7...v3.0.8)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-22 15:10:04 +02:00
Quentin Gliech 4c5f2e7de0 ci: Build the Docker image earlier 2022-08-19 11:43:36 +02:00
Quentin Gliech 310785c615 ci: Only build docker image for amd64 in PRs 2022-08-19 11:43:36 +02:00
dependabot[bot] 8bf9c24fe2 Bump actions/cache from 3.0.5 to 3.0.7
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.5 to 3.0.7.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.5...v3.0.7)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-19 10:32:43 +02:00
dependabot[bot] b063e3de41 Bump sigstore/cosign-installer from 2.5.0 to 2.5.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.5.0...v2.5.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-19 10:14:49 +02:00
Quentin Gliech d1147d0bed Run the Postgres database as a service in the CI 2022-08-05 09:48:02 +02:00
Quentin Gliech 64d410b32b Build in CI with SQLX_OFFLINE=1 2022-08-05 09:48:02 +02:00
Quentin Gliech 646a0f26d6 Database testing 2022-08-05 09:48:02 +02:00
Quentin Gliech 292c4e671c ci: ignore errors on the nightly toolchain 2022-08-03 15:20:21 +02:00
dependabot[bot] 83688c1a25 Bump actions/cache from 3.0.4 to 3.0.5
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.4...v3.0.5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 17:52:40 +02:00
dependabot[bot] 2841764986 Bump sigstore/cosign-installer from 2.4.1 to 2.5.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.4.1 to 2.5.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.4.1...v2.5.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 17:51:05 +02:00
Quentin Gliech af4ea8dd8f Reduce GitHub Actions usage
This removes the run on push for branches other than main, and
preemptively stops runs on the same ref
2022-07-04 16:02:03 +02:00
Quentin Gliech 02f7cf9cd5 Tweak the codecov setup 2022-07-04 15:49:58 +02:00
dependabot[bot] d210383445 Bump sigstore/cosign-installer from 2.4.0 to 2.4.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.4.0...v2.4.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-07-04 15:18:54 +02:00
Quentin Gliech 70ae9732e0 ci: send OPA policies coverage to codecov 2022-06-29 14:00:52 +02:00
Quentin Gliech 821182acd1 Bump dependencies and bumps MSRV to 1.60 2022-06-27 23:37:21 +02:00
dependabot[bot] 2eb3a43010 Bump sigstore/cosign-installer from 2.3.0 to 2.4.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.3.0...v2.4.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-09 11:40:46 +02:00
dependabot[bot] 6816854ff7 Bump actions/cache from 3.0.3 to 3.0.4
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.3...v3.0.4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-07 22:03:19 +02:00
Hugh Nimmo-Smith f8da848b40 Clean up github workflows (#233) 2022-06-07 07:26:49 +00:00
Hugh Nimmo-Smith a4e883b68f Build and publish docker image from main branch (#227) 2022-06-06 18:02:46 +00:00
Quentin Gliech 88c2625dc0 Compile and check OPA policies in CI 2022-06-03 13:37:20 +02:00
Quentin Gliech 881af37a6b Bump MSRV to 1.59 2022-06-03 13:37:20 +02:00
dependabot[bot] aeffa5b952 Bump actions/cache from 3.0.2 to 3.0.3
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.2...v3.0.3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-02 16:29:10 +02:00
dependabot[bot] fbd774a9fd Bump docker/login-action from 1 to 2
Bumps [docker/login-action](https://github.com/docker/login-action) from 1 to 2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-06 10:05:23 +02:00
dependabot[bot] 2dd32d707f Bump docker/metadata-action from 3 to 4
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 3 to 4.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md)
- [Commits](https://github.com/docker/metadata-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-06 10:05:16 +02:00
dependabot[bot] d23b54ac12 Bump docker/bake-action from 1 to 2
Bumps [docker/bake-action](https://github.com/docker/bake-action) from 1 to 2.
- [Release notes](https://github.com/docker/bake-action/releases)
- [Commits](https://github.com/docker/bake-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: docker/bake-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-06 10:05:05 +02:00
dependabot[bot] e6929a65fc Bump docker/setup-buildx-action from 1 to 2
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 1 to 2.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-06 10:04:56 +02:00
dependabot[bot] 8044d0a41b Bump sigstore/cosign-installer from 2.2.1 to 2.3.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.2.1...v2.3.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-28 10:26:04 +02:00
dependabot[bot] 66e28c2289 Bump sigstore/cosign-installer from 2.2.0 to 2.2.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.2.0...v2.2.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-15 12:25:34 +02:00
dependabot[bot] 442d016e15 Bump actions/cache from 3.0.1 to 3.0.2
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.1...v3.0.2)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-11 23:12:46 +02:00
Quentin Gliech 819cdfd9d8 Don't run doctests for coverage 2022-04-08 10:22:00 +02:00
Quentin Gliech 009db9aba1 Switch to stable coverage options in CI 2022-04-08 10:22:00 +02:00
dependabot[bot] b55c5bc94e Bump sigstore/cosign-installer from 2.1.0 to 2.2.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.1.0 to 2.2.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.1.0...v2.2.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-08 00:19:11 +02:00
Quentin Gliech 54170cac6f Bump MSRV to 1.57 2022-04-06 22:46:39 +02:00
dependabot[bot] 5592a17637 Bump actions/cache from 2.1.7 to 3.0.1
Bumps [actions/cache](https://github.com/actions/cache) from 2.1.7 to 3.0.1.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v2.1.7...v3.0.1)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-06 19:27:48 +02:00
dependabot[bot] 164919951d Bump codecov/codecov-action from 2 to 3
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 2 to 3.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-04-06 19:27:37 +02:00
dependabot[bot] 46997e173e Bump sigstore/cosign-installer from 2.0.1 to 2.1.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.0.1 to 2.1.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.0.1...v2.1.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-08 09:19:07 +01:00
dependabot[bot] af26dffc18 Bump actions/checkout from 2 to 3
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-03-01 21:26:49 +01:00
dependabot[bot] 53381ecbed Bump sigstore/cosign-installer from 2.0.0 to 2.0.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.0.0 to 2.0.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.0.0...v2.0.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-02-22 09:51:32 +01:00
Quentin Gliech 24648d6f4a ci: fix code coverage generation 2022-02-17 16:23:41 +01:00
Quentin Gliech cab5d21b20 ci: generate test coverage with a stable toolchain, not nightly 2022-02-17 15:59:00 +01:00
Quentin Gliech 6bb7739401 Only sign docker image on tags and main branch 2022-02-08 09:04:39 +01:00
Quentin Gliech 6e13a2d127 Fix grcov installation in CI 2022-02-02 10:32:56 +01:00
Quentin Gliech 65b382520c Fix CI permissions to sign images 2022-02-01 15:38:00 +01:00
Quentin Gliech e20a542a1f Sign images with cosign in CI 2022-02-01 14:32:03 +01:00
dependabot[bot] cc08540190 Bump actions/cache from 2.1.6 to 2.1.7
Bumps [actions/cache](https://github.com/actions/cache) from 2.1.6 to 2.1.7.
- [Release notes](https://github.com/actions/cache/releases)
- [Commits](https://github.com/actions/cache/compare/v2.1.6...v2.1.7)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-01-25 16:55:21 +01:00
Quentin Gliech 70aafc41bb ci: explicit jobs permissions 2022-01-25 15:49:56 +01:00
Quentin Gliech c3b0b611db ci: remove LSIF index step 2022-01-25 15:47:23 +01:00
Quentin Gliech fd210fc7c7 ci: restore less stuff from cache to avoid cache size explosion 2022-01-25 15:41:12 +01:00