Merge pull request #1 from spiffe/main

k
stevend-uber · Jan 18, 2024 · f74bd0b · f74bd0b
2 parents 71f2414 + abefffa
commit f74bd0b
Show file tree

Hide file tree

Showing 463 changed files with 6,483 additions and 3,494 deletions.
diff --git a/.envrc.example b/.envrc.example
@@ -0,0 +1,8 @@
+toplevel="$(git rev-parse --show-toplevel)"
+
+# build and use the managed go sdk
+unset GOROOT
+make -C "$toplevel" go-check
+PATH="$(make --no-print-directory -C "$toplevel" go-bin-path)"
+
+# add custom direnv initialization below here
diff --git a/.githooks/pre-commit b/.githooks/pre-commit
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -7,18 +7,24 @@ updates:
     time: "09:00"
     timezone: "America/Los_Angeles"
   groups:
+    actions:
+      patterns:
+        - "github.com/actions/*"
     aws-sdk:
       patterns:
         - "github.com/aws/aws-sdk-go-v2/*"
+    azure-sdk:
+      patterns:
+        - "github.com/Azure/azure-sdk-for-go/*"
     google-cloud-sdk:
       patterns:
         - "cloud.google.com/go/*"
+    k8s.io:
+      patterns:
+        - "k8s.io/*"
     sigs.k8s.io:
       patterns:
         - "sig.k8s.io/*"
-    azure-sdk:
-      patterns:
-        - "github.com/Azure/azure-sdk-for-go/*"
   ignore:
   - dependency-name: "github.com/spiffe/spire-api-sdk"
   - dependency-name: "github.com/spiffe/spire-plugin-sdk"

diff --git a/.github/workflows/depsreview.yaml b/.github/workflows/depsreview.yaml
@@ -10,6 +10,6 @@ jobs:
 
     steps:
       - name: 'Checkout Repository'
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: 'Dependency Review'
-        uses: actions/dependency-review-action@6c5ccdad469c9f8a2996bfecaec55a631a347034 # v3.1.0
+        uses: actions/dependency-review-action@c74b580d73376b7750d3d2a50bfb8adc2c937507 # v3.1.5
diff --git a/.github/workflows/nightly_build.yaml b/.github/workflows/nightly_build.yaml
@@ -22,9 +22,9 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4.1.0
+        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
       - name: Install cosign
-        uses: sigstore/cosign-installer@11086d25041f77fe8fe7b9ea4e48e3b9192b8f19 # v3.1.2
+        uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # v3.3.0
         with:
           cosign-release: v1.13.1
       - name: Install regctl