jetstack-secure
jetstack-secure copied to clipboard
Open source components of Jetstack Secure
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.2.0 to 3.5.0. Release notes Sourced from sigstore/cosign-installer's releases. v3.5.0 What's Changed Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in sigstore/cosign-installer#157 use go 1.22 now by...
Bumps golang from 1.21.6 to 1.22.2. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.15.0 to 0.15.10. Release notes Sourced from anchore/sbom-action's releases. v0.15.10 Changes in v0.15.10 Update Syft to v1.1.0 (#454) Bump Node to v20 on download-syft/publish-sbom actions (#448) [ViacheslavKudinov]...
Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.18.0 to 1.19.0. Release notes Sourced from github.com/prometheus/client_golang's releases. v1.19.0 What's Changed The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for...
Updates the venafi-kubernetes-agent helm chart to include the HTTPS_PROXY, HTTP_PROXY, NO_PROXY env vars. with HTTPS_PROXY value ``` # Source: venafi-kubernetes-agent/templates/deployment.yaml apiVersion: apps/v1 kind: Deployment metadata: name: venafi-kubernetes-agent-release-name namespace: default labels:...
Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.15.0 to 0.15.11. Release notes Sourced from anchore/sbom-action's releases. v0.15.11 Changes in v0.15.11 chore(deps): update Syft to v1.3.0 (#456) [anchore-actions-token-generator] chore: remove outdated snapshot workflow (#457) [spiffcs]...
**Ref:** [VC-32931](https://venafi.atlassian.net/browse/VC-32931) Istio can be operated using a self-signed CA (with the secret `istio-ca-secret`) or using the Plugin CA with the secret `cacerts`. Both these secrets use non-standard keys unknown...
In https://github.com/jetstack/jetstack-secure/pull/341 @tfadeyi added a metrics server to the agent. In this PR I've made the minimum viable changes to allow that metrics server to be queried by Prometheus, when...
The following step in the workflow always seems to fail for quite a while: https://github.com/jetstack/jetstack-secure/blob/master/.github/workflows/release-master.yml#L95-L100 We don't see it because it only runs on master branch. Given no-one has noticed...