Commit Graph

108 Commits

Author SHA1 Message Date
Quentin Gliech
412bb92bf8 Disable the Prometheus feature by default
It remains enabled in the Docker image, but this avoids having to have
protoc installed to build the binary
2022-11-19 00:11:04 +01:00
Quentin Gliech
44d397b54c Do not embed the WASM-compiled policies in the binary 2022-11-18 22:37:55 +01:00
Quentin Gliech
d04664a681 Setup Jest 2022-11-18 13:43:01 +01:00
Quentin Gliech
f33810ce1a Lint GraphQL schema and operations with eslint 2022-11-18 13:43:01 +01:00
Quentin Gliech
d72e702b73 Automate schema updates 2022-11-09 19:17:12 +01:00
Quentin Gliech
d0c864cec2 Bump rustc to 1.65 2022-11-03 21:56:58 +01:00
Quentin Gliech
447517f0b0 ci: Run clippy from a fixed version instead of stable 2022-11-03 16:18:06 +01:00
Quentin Gliech
68febbff2d dockerfile: cross-compile with cargo-zigbuild & embed audit infos 2022-11-03 15:19:49 +01:00
Quentin Gliech
8eb4891aa2 ci: Checkout the code but use the remote context in docker build 2022-11-03 15:19:49 +01:00
Quentin Gliech
c7baf6a549 Fix Docker build context URL 2022-11-03 15:19:49 +01:00
Quentin Gliech
3c31212074 Build docker image without checking out the code 2022-11-03 15:19:49 +01:00
Quentin Gliech
901b9bbfae Simplify and speedup CI 2022-11-03 15:19:49 +01:00
Quentin Gliech
cdf486d0cd Bump Rust, OPA and NodeJS in Docker image 2022-10-27 15:39:16 +02:00
dependabot[bot]
9c9f27b05d Bump peaceiris/actions-gh-pages from 3.8.0 to 3.9.0
Bumps [peaceiris/actions-gh-pages](https://github.com/peaceiris/actions-gh-pages) from 3.8.0 to 3.9.0.
- [Release notes](https://github.com/peaceiris/actions-gh-pages/releases)
- [Changelog](https://github.com/peaceiris/actions-gh-pages/blob/main/CHANGELOG.md)
- [Commits](068dc23d97...de7ea6f8ef)

---
updated-dependencies:
- dependency-name: peaceiris/actions-gh-pages
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-24 22:03:11 +02:00
dependabot[bot]
001d6d130e Bump peaceiris/actions-mdbook from 1.1.14 to 1.2.0
Bumps [peaceiris/actions-mdbook](https://github.com/peaceiris/actions-mdbook) from 1.1.14 to 1.2.0.
- [Release notes](https://github.com/peaceiris/actions-mdbook/releases)
- [Changelog](https://github.com/peaceiris/actions-mdbook/blob/main/CHANGELOG.md)
- [Commits](4b5ef36b31...adeb05db28)

---
updated-dependencies:
- dependency-name: peaceiris/actions-mdbook
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-24 22:02:20 +02:00
dependabot[bot]
77262ff5ce Bump sigstore/cosign-installer from 2.8.0 to 2.8.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.8.0 to 2.8.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.8.0...v2.8.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-20 08:29:47 +02:00
dependabot[bot]
71c019635a Bump sigstore/cosign-installer from 2.7.0 to 2.8.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.7.0 to 2.8.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.7.0...v2.8.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-18 10:43:51 +02:00
dependabot[bot]
ab2e1f5f8e Bump actions/cache from 3.0.8 to 3.0.11
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.8 to 3.0.11.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.8...v3.0.11)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-10-18 10:43:34 +02:00
Quentin Gliech
01d464c887 Gate the prometheus exporter behind a feature
Also fixes the Docker image building and the CI builds
2022-09-28 11:13:53 +02:00
Quentin Gliech
f2b3649d75 Bump MSRV to 1.61.0 2022-09-27 19:05:25 +02:00
Quentin Gliech
8adc54b479 ci: do not run the tests with --all-features 2022-09-27 19:05:25 +02:00
dependabot[bot]
87055c0dfe Bump sigstore/cosign-installer from 2.6.0 to 2.7.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.6.0 to 2.7.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.6.0...v2.7.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-27 18:56:18 +02:00
dependabot[bot]
6ad5aa23e2 Bump sigstore/cosign-installer from 2.5.1 to 2.6.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.1 to 2.6.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.5.1...v2.6.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-09-12 22:58:06 +02:00
Quentin Gliech
8316433bb8 Also include doctests in code coverage 2022-09-02 15:37:46 +02:00
Quentin Gliech
aba1919ba9 Bump OPA in GitHub Actions 2022-08-22 15:23:53 +02:00
dependabot[bot]
ebb83053ec Bump actions/cache from 3.0.7 to 3.0.8
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.7 to 3.0.8.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.7...v3.0.8)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-22 15:10:04 +02:00
Quentin Gliech
d2e2501e5f ci: Build the Docker image earlier 2022-08-19 11:43:36 +02:00
Quentin Gliech
b08accb42a ci: Only build docker image for amd64 in PRs 2022-08-19 11:43:36 +02:00
dependabot[bot]
4bd231dbb7 Bump actions/cache from 3.0.5 to 3.0.7
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.5 to 3.0.7.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.5...v3.0.7)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-19 10:32:43 +02:00
dependabot[bot]
0eab8b8b2b Bump sigstore/cosign-installer from 2.5.0 to 2.5.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.5.0...v2.5.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-19 10:14:49 +02:00
Quentin Gliech
596bd51857 Run the Postgres database as a service in the CI 2022-08-05 09:48:02 +02:00
Quentin Gliech
9cb26765a9 Build in CI with SQLX_OFFLINE=1 2022-08-05 09:48:02 +02:00
Quentin Gliech
c495814754 Database testing 2022-08-05 09:48:02 +02:00
Quentin Gliech
59da12e6d6 ci: ignore errors on the nightly toolchain 2022-08-03 15:20:21 +02:00
dependabot[bot]
25e8012135 Bump actions/cache from 3.0.4 to 3.0.5
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.4 to 3.0.5.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.4...v3.0.5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 17:52:40 +02:00
dependabot[bot]
580b17f4c3 Bump sigstore/cosign-installer from 2.4.1 to 2.5.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.4.1 to 2.5.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.4.1...v2.5.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-08-01 17:51:05 +02:00
Quentin Gliech
68f631c127 Reduce GitHub Actions usage
This removes the run on push for branches other than main, and
preemptively stops runs on the same ref
2022-07-04 16:02:03 +02:00
Quentin Gliech
6f7996da09 Tweak the codecov setup 2022-07-04 15:49:58 +02:00
dependabot[bot]
2743724e8f Bump sigstore/cosign-installer from 2.4.0 to 2.4.1
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.4.0 to 2.4.1.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.4.0...v2.4.1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-07-04 15:18:54 +02:00
Quentin Gliech
2c80990bdc ci: send OPA policies coverage to codecov 2022-06-29 14:00:52 +02:00
Quentin Gliech
acd428384d Bump dependencies and bumps MSRV to 1.60 2022-06-27 23:37:21 +02:00
dependabot[bot]
207c9ffaa3 Bump sigstore/cosign-installer from 2.3.0 to 2.4.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 2.3.0 to 2.4.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](https://github.com/sigstore/cosign-installer/compare/v2.3.0...v2.4.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-09 11:40:46 +02:00
dependabot[bot]
a9ea0297b5 Bump actions/cache from 3.0.3 to 3.0.4
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.3 to 3.0.4.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.3...v3.0.4)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-07 22:03:19 +02:00
Hugh Nimmo-Smith
1c05e43685 Clean up github workflows (#233) 2022-06-07 07:26:49 +00:00
Hugh Nimmo-Smith
b239e9573e Build and publish docker image from main branch (#227) 2022-06-06 18:02:46 +00:00
Quentin Gliech
b17715473a Compile and check OPA policies in CI 2022-06-03 13:37:20 +02:00
Quentin Gliech
29c819c6ba Bump MSRV to 1.59 2022-06-03 13:37:20 +02:00
dependabot[bot]
026281e8e4 Bump actions/cache from 3.0.2 to 3.0.3
Bumps [actions/cache](https://github.com/actions/cache) from 3.0.2 to 3.0.3.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3.0.2...v3.0.3)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-06-02 16:29:10 +02:00
dependabot[bot]
e11909b057 Bump docker/login-action from 1 to 2
Bumps [docker/login-action](https://github.com/docker/login-action) from 1 to 2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v1...v2)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-06 10:05:23 +02:00
dependabot[bot]
c7a2448752 Bump docker/metadata-action from 3 to 4
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 3 to 4.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Upgrade guide](https://github.com/docker/metadata-action/blob/master/UPGRADE.md)
- [Commits](https://github.com/docker/metadata-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2022-05-06 10:05:16 +02:00