s3cme
s3cme copied to clipboard
mchmarny
Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko generative SBOM, cosign attestation, and SLSA build provenance
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.3.0 to 4.3.3. Release notes Sourced from actions/upload-artifact's releases. v4.3.3 What's Changed updating @actions/artifact dependency to v2.1.6 by @eggyhead in actions/upload-artifact#565 Full Changelog: https://github.com/actions/upload-artifact/compare/v4.3.2...v4.3.3 v4.3.2 What's Changed...
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "dependabot[bot] avatar"){kind=avatar}
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.3.0 to 3.5.0. Release notes Sourced from sigstore/cosign-installer's releases. v3.5.0 What's Changed Bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in sigstore/cosign-installer#157 use go 1.22 now by...
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.1.5 to 4.3.0. Release notes Sourced from codecov/codecov-action's releases. v4.3.0 What's Changed fix: automatically detect if using GitHub enterprise by @thomasrockhu-codecov in codecov/codecov-action#1356 build(deps-dev): bump typescript from...
Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.16.1 to 0.19.0. Release notes Sourced from aquasecurity/trivy-action's releases. v0.19.0 What's Changed bump trivy version to v0.50.1 by @simar7 in aquasecurity/trivy-action#324 Full Changelog: https://github.com/aquasecurity/trivy-action/compare/0.18.0...0.19.0 v0.18.0 What's Changed...
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.9.0. Release notes Sourced from github.com/stretchr/testify's releases. v1.9.0 What's Changed Fix Go modules version by @SuperQ in stretchr/testify#1394 Document that require is not safe to...
Bumps [github.com/rs/zerolog](https://github.com/rs/zerolog) from 1.31.0 to 1.32.0. Commits 147ae65 Fix prettylog piping (#644) 4d78dc5 Add forwarding close methods to several writer implementations (#636) c1ab4ed Make Log.Fatal() call Close on the writer...
Bumps [andstor/file-existence-action](https://github.com/andstor/file-existence-action) from 2.0.0 to 3.0.0. Release notes Sourced from andstor/file-existence-action's releases. v3.0.0 Changed Updated to the node20 runtime by default Commits 076e007 Update build.yml 40a4313 3.0.0 05baca1 Merge pull...
