Walt

Add a Code of Conduct

2

The teleport repo got a code of conduct here: https://github.com/gravitational/teleport/commit/9d27061aee7c9868aff90aa2c18741ddb489bac5 and gravity got the same here: https://github.com/gravitational/gravity/pull/925 We should include our code of conduct in the teleconsole repo. Although teleconsole...

### Feature Request Move gravity build/release's use of clientbuilds.gravitational.io to a differnt s3 bucket https://github.com/gravitational/gravity/blob/447384911ea37750bd4557a7d502541f492d8c49/build.assets/Makefile#L53 ### Motivation As discussed at https://github.com/gravitational/cloud-terraform/pull/219#discussion_r602720177, Gravity and teleport build artifacts cohabitate in clientbuilds.gravitational.io. In...

[BUG] gravity gc does not collect stale packages in /var/lib/gravity/site/packages/

2

**Describe the bug** Disk utilitization in /var/lib/gravity/site/packages/ does not notably drop after running `gravity gc` as described in our [test plan](https://github.com/gravitational/gravity/blob/d4b3c67b2c8f785883fb1581c36e5ab435a6f71f/docs/7.x/testplan.md#collecting-garbage) Before gc: ``` 6.7G /var/lib/gravity/local/packages 6.3G /var/lib/gravity/site/packages ``` After...

## Summary The satellite README.md file mentions that we use 'dep'. However, in #226 we switched from dep to go modules. We should remove the entire dependencies section as it...

## Details We regularly get vulnerability submissions for content like: * https://github.com/gravitational/teleport/blame/65e01165124c97740ecf1f1fd8ddbeacc95c6b57/docs/pages/deploy-a-cluster/deployments/ibm.mdx#L153-L155 We should update these credentials to be clearly bogus. For example, prefix them with "fake" or "replaceme", or...

This box went belly up in https://github.com/gravitational/ops/issues/369 While these changes don't address all the codepaths related to the defunct gravity mac build infra, they do remove blatantly broken secrets. ##...

Switch ops branch from master to main

2

## Description I moved the ops repo to use main a couple weeks ago, and making this change will allow me to delete master in that repo. Longer term, I'd...

Feature Request: Ensure GitHub Action Dependencies are Pinned

1

The GitHub Actions documentation on "[Using 3rd Party Actions](https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-third-party-actions)" states that users should: > Pin actions to a full length commit SHA > > Pinning an action to a full...

This will help keep CI dependencies up to date. With the recent NodeJS 16 EoL, many "component" actions such as `actions/checkout` are throwing warnings/getting updates. This is already fixed for...