Commit Graph

108 Commits

Author SHA1 Message Date
Quentin Gliech 9ccc8b1acb Disable the Prometheus feature by default
It remains enabled in the Docker image, but this avoids having to have
protoc installed to build the binary
2022-11-19 00:11:04 +01:00
Quentin Gliech 834214bcac Do not embed the WASM-compiled policies in the binary 2022-11-18 22:37:55 +01:00
Quentin Gliech 04b5ce1544 Setup Jest 2022-11-18 13:43:01 +01:00
Quentin Gliech 47c9b54c06 Lint GraphQL schema and operations with eslint 2022-11-18 13:43:01 +01:00
Quentin Gliech 3f56031795 Automate schema updates 2022-11-09 19:17:12 +01:00
Quentin Gliech eeb442b6d0 Bump rustc to 1.65 2022-11-03 21:56:58 +01:00
Quentin Gliech 3dc7388f88 ci: Run clippy from a fixed version instead of stable 2022-11-03 16:18:06 +01:00
Quentin Gliech 3fc386a4dd dockerfile: cross-compile with cargo-zigbuild & embed audit infos 2022-11-03 15:19:49 +01:00
Quentin Gliech f70d883377 ci: Checkout the code but use the remote context in docker build 2022-11-03 15:19:49 +01:00
Quentin Gliech 03e903cd32 Fix Docker build context URL 2022-11-03 15:19:49 +01:00
Quentin Gliech 7db0a2abdf Build docker image without checking out the code 2022-11-03 15:19:49 +01:00
Quentin Gliech a7ffb635d4 Simplify and speedup CI 2022-11-03 15:19:49 +01:00
Quentin Gliech 7683bc4efe Bump Rust, OPA and NodeJS in Docker image 2022-10-27 15:39:16 +02:00
dependabot[bot] 2665c7fcf3 Bump peaceiris/actions-gh-pages from 3.8.0 to 3.9.0
Bumps [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) from 3.8.0 to 3.9.0.
- [Release notes](https://github.com/peaceiris/actions-gh-pages/releases)
- [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md)
- [Commits](https://github.com/peaceiris/actions-gh-pages/compare/068dc23d9710f1ba62e86896f84735d869951305...de7ea6f8efb354206b205ef54722213d99067935)

---
updated-dependencies:
- dependency-name: peaceiris/actions-gh-pages
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-24 22:03:11 +02:00
dependabot[bot] d91d6180f9 Bump peaceiris/actions-mdbook from 1.1.14 to 1.2.0
Bumps [peaceiris/actions-mdbook](https://github.com/peaceiris/actions-mdbook) from 1.1.14 to 1.2.0.
- [Release notes](https://github.com/peaceiris/actions-mdbook/releases)
- [Changelog](https://github.com/peaceiris/actions-mdbook/blob/main/CHANGELOG.md)
- [Commits](https://github.com/peaceiris/actions-mdbook/compare/4b5ef36b314c2599664ca107bb8c02412548d79d...adeb05db28a0c0004681db83893d56c0388ea9ea)

---
updated-dependencies:
- dependency-name: peaceiris/actions-mdbook
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-24 22:02:20 +02:00
dependabot[bot] 3e73e3f078 Bump sigstore/cosign-installer from 2.8.0 to 2.8.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.8.0 to 2.8.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.8.0...v2.8.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-20 08:29:47 +02:00
dependabot[bot] b814c424bc Bump sigstore/cosign-installer from 2.7.0 to 2.8.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.7.0...v2.8.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-18 10:43:51 +02:00
dependabot[bot] b57fd0078c Bump actions/cache from 3.0.8 to 3.0.11
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.8 to 3.0.11.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.8...v3.0.11)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-18 10:43:34 +02:00
Quentin Gliech 9e3b3567b2 Gate the prometheus exporter behind a feature
Also fixes the Docker image building and the CI builds
2022-09-28 11:13:53 +02:00
Quentin Gliech 26681b36fc Bump MSRV to 1.61.0 2022-09-27 19:05:25 +02:00
Quentin Gliech a2d35cb164 ci: do not run the tests with --all-features 2022-09-27 19:05:25 +02:00
dependabot[bot] 3cb5422d4d Bump sigstore/cosign-installer from 2.6.0 to 2.7.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.6.0...v2.7.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-27 18:56:18 +02:00
dependabot[bot] 42e5c46e8a Bump sigstore/cosign-installer from 2.5.1 to 2.6.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.1 to 2.6.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.5.1...v2.6.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-12 22:58:06 +02:00
Quentin Gliech 6818316a11 Also include doctests in code coverage 2022-09-02 15:37:46 +02:00
Quentin Gliech 66b8f31503 Bump OPA in GitHub Actions 2022-08-22 15:23:53 +02:00
dependabot[bot] 5c2bff2883 Bump actions/cache from 3.0.7 to 3.0.8
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.7 to 3.0.8.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.7...v3.0.8)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-22 15:10:04 +02:00
Quentin Gliech 4c5f2e7de0 ci: Build the Docker image earlier 2022-08-19 11:43:36 +02:00
Quentin Gliech 310785c615 ci: Only build docker image for amd64 in PRs 2022-08-19 11:43:36 +02:00
dependabot[bot] 8bf9c24fe2 Bump actions/cache from 3.0.5 to 3.0.7
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.5 to 3.0.7.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.5...v3.0.7)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-19 10:32:43 +02:00
dependabot[bot] b063e3de41 Bump sigstore/cosign-installer from 2.5.0 to 2.5.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.5.0...v2.5.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-19 10:14:49 +02:00
Quentin Gliech d1147d0bed Run the Postgres database as a service in the CI 2022-08-05 09:48:02 +02:00
Quentin Gliech 64d410b32b Build in CI with SQLX_OFFLINE=1 2022-08-05 09:48:02 +02:00
Quentin Gliech 646a0f26d6 Database testing 2022-08-05 09:48:02 +02:00
Quentin Gliech 292c4e671c ci: ignore errors on the nightly toolchain 2022-08-03 15:20:21 +02:00
dependabot[bot] 83688c1a25 Bump actions/cache from 3.0.4 to 3.0.5
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.4...v3.0.5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 17:52:40 +02:00
dependabot[bot] 2841764986 Bump sigstore/cosign-installer from 2.4.1 to 2.5.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.4.1 to 2.5.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.4.1...v2.5.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 17:51:05 +02:00
Quentin Gliech af4ea8dd8f Reduce GitHub Actions usage
This removes the run on push for branches other than main, and
preemptively stops runs on the same ref
2022-07-04 16:02:03 +02:00
Quentin Gliech 02f7cf9cd5 Tweak the codecov setup 2022-07-04 15:49:58 +02:00
dependabot[bot] d210383445 Bump sigstore/cosign-installer from 2.4.0 to 2.4.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.4.0...v2.4.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-07-04 15:18:54 +02:00
Quentin Gliech 70ae9732e0 ci: send OPA policies coverage to codecov 2022-06-29 14:00:52 +02:00
Quentin Gliech 821182acd1 Bump dependencies and bumps MSRV to 1.60 2022-06-27 23:37:21 +02:00
dependabot[bot] 2eb3a43010 Bump sigstore/cosign-installer from 2.3.0 to 2.4.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.3.0...v2.4.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-09 11:40:46 +02:00
dependabot[bot] 6816854ff7 Bump actions/cache from 3.0.3 to 3.0.4
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.3...v3.0.4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-07 22:03:19 +02:00
Hugh Nimmo-Smith f8da848b40 Clean up github workflows (#233) 2022-06-07 07:26:49 +00:00
Hugh Nimmo-Smith a4e883b68f Build and publish docker image from main branch (#227) 2022-06-06 18:02:46 +00:00
Quentin Gliech 88c2625dc0 Compile and check OPA policies in CI 2022-06-03 13:37:20 +02:00
Quentin Gliech 881af37a6b Bump MSRV to 1.59 2022-06-03 13:37:20 +02:00
dependabot[bot] aeffa5b952 Bump actions/cache from 3.0.2 to 3.0.3
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.2...v3.0.3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-02 16:29:10 +02:00
dependabot[bot] fbd774a9fd Bump docker/login-action from 1 to 2
Bumps [docker/login-action](https://github.com/docker/login-action) from 1 to 2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-06 10:05:23 +02:00
dependabot[bot] 2dd32d707f Bump docker/metadata-action from 3 to 4
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 3 to 4.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md)
- [Commits](https://github.com/docker/metadata-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-06 10:05:16 +02:00