ratify
ratify copied to clipboard
ratify-project
Bump e2e test tool versions
What would you like to be added?
The ratify e2e tests use a lot of different OSS tools for artifact creation such as notation, trivy, oras, etc. We should bump to latest stable version of these tools since many are now Stable/GA.
Updates to Makefile here: https://github.com/deislabs/ratify/blob/main/Makefile#L15-L44
Anything else you would like to add?
No response
Are you willing to submit PRs to contribute to this feature?
- [ ] Yes, I am willing to implement it.
TODO: look into an automation strategy here. Can we leverage dependabot here?
Hey, looking to get involved with Ratify, I wouldn't mind picking this up to get my bearings. Are we still looking to implement this?
@RyanTalbot Hi Ryan, thanks for taking it! And there is community meeting on Weds 4:30-5:30pm (Pacific Time) if you'd like to join. https://github.com/deislabs/ratify?tab=readme-ov-file#community-meetings
Hey @binbin-li, no problem! Pacific Time isn't great for me (EU), but I'll try make it when I can to get involved!
hey @RyanTalbot! I've sent a PR to update the tool versions to the current latest in #1326. We realized some of the tools were quite far out of date and now were affecting Ratify's integration test completeness. If you're still interested in this issue, this one is definitely not solved yet. We don't have an automated way of first figuring out there are new versions, and then sending a PR to update these dependencies automatically. Just one way I can think of doing this but open to any other option 😄