Tags: thorsager/surl
Tags
chore(ci): update upload-sarif action to v4 (#16) * chore(ci): update upload-sarif action to v4 Bump the GitHub Action 'github/codeql-action/upload-sarif' from v3 to v4 in the Go workflow. This ensures compatibility with the latest features and security updates provided by the action. * feat(ci): improve Trivy scan reporting in PR workflow Enhance the GitHub Actions workflow to provide detailed Trivy scan results for pull requests. The workflow now generates both JSON and table outputs, counts vulnerabilities, and posts a summary comment with details if any CRITICAL or HIGH vulnerabilities are found. The workflow will fail if vulnerabilities are detected, ensuring better visibility and enforcement of security standards. * ci: enhance Trivy scan feedback in PR workflow Update GitHub Actions workflow to improve Trivy scan handling. Adds logic to check scan results, post detailed comments to pull requests, and fail the job if security issues are found. This ensures better visibility and prevents merging PRs with unresolved vulnerabilities.
Create docker-publish.yml (#12) * Create docker-publish.yml * Delete .github/workflows/publish-main.yml * Delete .github/workflows/publish-on-branch.yml * Delete .github/workflows/publish-on-tag.yml * chore(deps): bump pflag to v1.0.10 Updated github.com/spf13/pflag from v1.0.5 to v1.0.10 in go.mod and go.sum to address dependency updates and ensure compatibility. * chore(docker): use uppercase AS for build stage Updated Dockerfile to use uppercase 'AS' in the build stage for consistency with Docker best practices. * ci: add GitHub automation for deps and releases - Add Dependabot config for Go module updates - Add Release Drafter config for changelog automation - Add workflow to ensure PRs have version labels - Add workflow to update release drafts on push/PR * ci: update release drafter config for versioning - Switch to resolved version for name and tag templates - Add bugfix label to bug fixes category - Rename Maintenance to Maintenance and add chore label - Add version resolver for major, minor, patch labels - Update change template and escapes for changelog