Commit Graph

44 Commits

Author SHA1 Message Date
Quentin Gliech ca112d45e1 ci: Update clippy to 1.66 and fix new warnings 2022-12-16 18:16:18 +01:00
Quentin Gliech 5b28c1e6ce Upgrade Rust, OPA, Node in CI and Docker image 2022-12-16 18:16:18 +01:00
Quentin Gliech 9ccc8b1acb Disable the Prometheus feature by default
It remains enabled in the Docker image, but this avoids having to have
protoc installed to build the binary
2022-11-19 00:11:04 +01:00
Quentin Gliech 834214bcac Do not embed the WASM-compiled policies in the binary 2022-11-18 22:37:55 +01:00
Quentin Gliech 04b5ce1544 Setup Jest 2022-11-18 13:43:01 +01:00
Quentin Gliech 47c9b54c06 Lint GraphQL schema and operations with eslint 2022-11-18 13:43:01 +01:00
Quentin Gliech 3f56031795 Automate schema updates 2022-11-09 19:17:12 +01:00
Quentin Gliech eeb442b6d0 Bump rustc to 1.65 2022-11-03 21:56:58 +01:00
Quentin Gliech 3dc7388f88 ci: Run clippy from a fixed version instead of stable 2022-11-03 16:18:06 +01:00
Quentin Gliech 3fc386a4dd dockerfile: cross-compile with cargo-zigbuild & embed audit infos 2022-11-03 15:19:49 +01:00
Quentin Gliech f70d883377 ci: Checkout the code but use the remote context in docker build 2022-11-03 15:19:49 +01:00
Quentin Gliech 03e903cd32 Fix Docker build context URL 2022-11-03 15:19:49 +01:00
Quentin Gliech 7db0a2abdf Build docker image without checking out the code 2022-11-03 15:19:49 +01:00
Quentin Gliech a7ffb635d4 Simplify and speedup CI 2022-11-03 15:19:49 +01:00
Quentin Gliech 7683bc4efe Bump Rust, OPA and NodeJS in Docker image 2022-10-27 15:39:16 +02:00
dependabot[bot] 3e73e3f078 Bump sigstore/cosign-installer from 2.8.0 to 2.8.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.8.0 to 2.8.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.8.0...v2.8.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-20 08:29:47 +02:00
dependabot[bot] b814c424bc Bump sigstore/cosign-installer from 2.7.0 to 2.8.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.7.0...v2.8.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-18 10:43:51 +02:00
dependabot[bot] b57fd0078c Bump actions/cache from 3.0.8 to 3.0.11
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.8 to 3.0.11.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.8...v3.0.11)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-18 10:43:34 +02:00
Quentin Gliech 9e3b3567b2 Gate the prometheus exporter behind a feature
Also fixes the Docker image building and the CI builds
2022-09-28 11:13:53 +02:00
Quentin Gliech 26681b36fc Bump MSRV to 1.61.0 2022-09-27 19:05:25 +02:00
Quentin Gliech a2d35cb164 ci: do not run the tests with --all-features 2022-09-27 19:05:25 +02:00
dependabot[bot] 3cb5422d4d Bump sigstore/cosign-installer from 2.6.0 to 2.7.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.6.0...v2.7.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-27 18:56:18 +02:00
dependabot[bot] 42e5c46e8a Bump sigstore/cosign-installer from 2.5.1 to 2.6.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.1 to 2.6.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.5.1...v2.6.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-12 22:58:06 +02:00
Quentin Gliech 6818316a11 Also include doctests in code coverage 2022-09-02 15:37:46 +02:00
Quentin Gliech 66b8f31503 Bump OPA in GitHub Actions 2022-08-22 15:23:53 +02:00
dependabot[bot] 5c2bff2883 Bump actions/cache from 3.0.7 to 3.0.8
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.7 to 3.0.8.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.7...v3.0.8)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-22 15:10:04 +02:00
Quentin Gliech 4c5f2e7de0 ci: Build the Docker image earlier 2022-08-19 11:43:36 +02:00
Quentin Gliech 310785c615 ci: Only build docker image for amd64 in PRs 2022-08-19 11:43:36 +02:00
dependabot[bot] 8bf9c24fe2 Bump actions/cache from 3.0.5 to 3.0.7
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.5 to 3.0.7.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.5...v3.0.7)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-19 10:32:43 +02:00
dependabot[bot] b063e3de41 Bump sigstore/cosign-installer from 2.5.0 to 2.5.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.5.0...v2.5.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-19 10:14:49 +02:00
Quentin Gliech d1147d0bed Run the Postgres database as a service in the CI 2022-08-05 09:48:02 +02:00
Quentin Gliech 64d410b32b Build in CI with SQLX_OFFLINE=1 2022-08-05 09:48:02 +02:00
Quentin Gliech 646a0f26d6 Database testing 2022-08-05 09:48:02 +02:00
Quentin Gliech 292c4e671c ci: ignore errors on the nightly toolchain 2022-08-03 15:20:21 +02:00
dependabot[bot] 83688c1a25 Bump actions/cache from 3.0.4 to 3.0.5
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.4...v3.0.5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 17:52:40 +02:00
dependabot[bot] 2841764986 Bump sigstore/cosign-installer from 2.4.1 to 2.5.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.4.1 to 2.5.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.4.1...v2.5.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 17:51:05 +02:00
Quentin Gliech af4ea8dd8f Reduce GitHub Actions usage
This removes the run on push for branches other than main, and
preemptively stops runs on the same ref
2022-07-04 16:02:03 +02:00
Quentin Gliech 02f7cf9cd5 Tweak the codecov setup 2022-07-04 15:49:58 +02:00
dependabot[bot] d210383445 Bump sigstore/cosign-installer from 2.4.0 to 2.4.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.4.0...v2.4.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-07-04 15:18:54 +02:00
Quentin Gliech 70ae9732e0 ci: send OPA policies coverage to codecov 2022-06-29 14:00:52 +02:00
Quentin Gliech 821182acd1 Bump dependencies and bumps MSRV to 1.60 2022-06-27 23:37:21 +02:00
dependabot[bot] 2eb3a43010 Bump sigstore/cosign-installer from 2.3.0 to 2.4.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.3.0...v2.4.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-09 11:40:46 +02:00
dependabot[bot] 6816854ff7 Bump actions/cache from 3.0.3 to 3.0.4
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.3...v3.0.4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-07 22:03:19 +02:00
Hugh Nimmo-Smith f8da848b40 Clean up github workflows (#233) 2022-06-07 07:26:49 +00:00