e6a96be547
project: Add SECURITY.md
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2023-05-27 12:37:21 +02:00
7ce5629658
Merge pull request #270 from thaJeztah/remove_execabs
...
remove uses of golang.org/x/sys/execabs
2023-05-27 11:47:10 +02:00
37c4a6b158
remove uses of golang.org/x/sys/execabs
...
the "golang.org/x/sys/execabs" package was introduced to address a security
issue on Windows, and changing the default behavior of os/exec was considered
a breaking change. go1.19 applied the behavior that was previously implemented
in the execabs package;
from the release notes: https://go.dev/doc/go1.19#os-exec-path
> Command and LookPath no longer allow results from a PATH search to be found
> relative to the current directory. This removes a common source of security
> problems but may also break existing programs that depend on using, say,
> exec.Command("prog") to run a binary named prog (or, on Windows, prog.exe)
> in the current directory. See the os/exec package documentation for information
> about how best to update such programs.
>
> On Windows, Command and LookPath now respect the NoDefaultCurrentDirectoryInExePath
> environment variable, making it possible to disable the default implicit search
> of “.” in PATH lookups on Windows systems.
With those changes, we no longer need to use the execabs package, and we can
switch back to os/exec.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2023-05-26 02:11:17 +02:00
da93839996
Merge pull request #263 from crazy-max/update-go
...
update go to 1.20
2023-04-16 12:34:50 +02:00
da7f673a5e
Merge pull request #265 from crazy-max/bump-golang-sys
...
Bump golang.org/x/sys to v0.7.0
2023-04-16 12:29:22 +02:00
d5c91a2f56
remove deprecated golangci-lint linters
...
Linters 'deadcode', 'structcheck', 'varcheck' are deprecated
since v1.49.0 and had been replaced by 'unused'.
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-04-16 12:29:03 +02:00
e9656dd67f
update golangci-lint to v1.51.1
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-04-16 12:29:03 +02:00
52f0cb6de6
update go to 1.20
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-04-16 12:29:03 +02:00
bde49b32dd
Merge pull request #264 from crazy-max/update-xx
...
Dockerfile: update xx to 1.2.1
2023-04-16 12:26:14 +02:00
b3ec48855b
Bump golang.org/x/sys to v0.7.0
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-04-16 12:07:42 +02:00
0db06514b9
update xx to 1.2.1
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-04-16 11:24:27 +02:00
d7835111fd
Merge pull request #252 from okrc/patch-1
...
Fix build status badge being broken
2023-01-30 13:38:11 +01:00
be409725f3
Fix build status badge being broken
...
Signed-off-by: okrc <okrc@hexo.dev >
2023-01-30 12:19:07 +01:00
20454add32
Merge pull request #253 from crazy-max/fix-dockerfile
...
Dockerfile: fix vendor validation
2023-01-30 12:02:01 +01:00
5674caebaf
Dockerfile: fix vendor validation
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2023-01-22 21:47:18 +01:00
ac5992b5f4
Merge pull request #239 from crazy-max/debian-base
...
Dockerfile: debian based build
2022-08-31 09:33:52 +02:00
205638eeb3
ci: add concurrency check
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-30 13:09:09 +02:00
29c449aea8
Dockerfile: debian based build
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-30 13:09:08 +02:00
2f246b8570
Merge pull request #221 from nicks/nicks/pass
...
pass: return an error when a cred doesn't exist
2022-08-28 21:33:45 +02:00
0ab1dd03b3
Merge pull request #238 from thaJeztah/bump_golang_sys
...
vendor: golang.org/x/sys v0.0.0-20220825204002-c680a09ffe64
2022-08-28 21:15:35 +02:00
3526ac5303
vendor: golang.org/x/sys v0.0.0-20220825204002-c680a09ffe64
...
update to latest version
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2022-08-28 21:06:44 +02:00
7c04fb1f9c
Merge pull request #237 from crazy-max/release
...
Release target with checksums
2022-08-28 20:58:51 +02:00
d4880decb1
remove CHANGELOG
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-28 20:53:51 +02:00
214ecc1238
create GitHub Release on push tag with artifacts
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-28 20:53:51 +02:00
056f8792b7
release target with checksums
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-28 20:53:51 +02:00
da1d534b46
Merge pull request #234 from crazy-max/versioning
...
Set version and revision at linked time
2022-08-27 00:37:28 +02:00
a2d8aac9dd
ci: add build-deb job
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-27 00:32:19 +02:00
48ab0d84e8
Fix deb package
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-27 00:32:19 +02:00
e50298d973
Makefile: mutualize local and Dockerfile build opts
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-27 00:32:19 +02:00
2c31fa46db
ci: fetch depth 0 at build time for proper versioning
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-25 14:50:26 +02:00
a37d38a864
Set version and revision at linked time
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-25 14:50:18 +02:00
51249117fa
Merge pull request #236 from ZauberNerd/relative-paths-makefile
...
Use relative paths in Makefile for "go build"
2022-08-25 12:34:43 +02:00
3289c31a02
Use relative paths in Makefile for "go build"
...
https://github.com/docker/docker-credential-helpers/pull/232#issuecomment-1226943341
Fixes #232
Signed-off-by: Björn Brauer <bjoern.brauer@new-work.se >
2022-08-25 10:02:20 +00:00
ebd9dc6c79
Merge pull request #169 from ellsclytn/pass-macos-and-linux
...
Allow pass helper to be built for macOS
2022-08-21 16:24:33 +02:00
cc29c66bcc
Dockerfile: build pass on macOS
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2022-08-21 16:19:22 +02:00
dd465ef1f3
Allow pass helper to be built for macOS
...
Pass is described as "The Standard Unix Password Manager", and so it can
easily run on more than just Linux. Namely, it's supported on macOS. The
CLI is identical to the Linux build, which means the Linux helper code
for Pass is fully applicable toward the macOS build - a couple of
renames being the only needed thing, purely for semantic correctness.
Signed-off-by: Ellis Clayton <ellis@ellis.codes >
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2022-08-21 16:18:19 +02:00
a9d6be0a41
Merge pull request #233 from thaJeztah/update_readme_instructions
...
Update local build instructions in README
2022-08-21 16:16:39 +02:00
becf2f2a95
Update local build instructions in README
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2022-08-21 16:10:50 +02:00
6dfcfc15aa
Merge pull request #232 from thaJeztah/simplify_build
...
simplify "go build" commands
2022-08-21 15:43:02 +02:00
5a61a5bc61
Merge pull request #231 from crazy-max/lint
...
lint gha job and remove travis
2022-08-21 15:42:07 +02:00
f522992580
remove travis
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-21 15:33:57 +02:00
9ec715d8ed
ci: init gpg key and pass for tests
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-21 15:33:57 +02:00
9582eb6661
lint gha job
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-21 15:33:56 +02:00
e847de4b42
simplify "go build" commands
...
There's no need to specify the file to build, as we're building the
"main" packages as a whole.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2022-08-21 15:30:16 +02:00
5302241995
Merge pull request #230 from crazy-max/vendor-license
...
vendor validation
2022-08-20 22:40:10 +02:00
e5695df009
vendor update and validation
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-20 21:49:52 +02:00
acd90ea9da
Merge pull request #227 from crazy-max/ppc64le-s390x
...
support linux/ppc64le and linux/s390x cross build
2022-08-20 21:11:04 +02:00
018b71b3c3
support linux/ppc64le and linux/s390x cross build
...
Signed-off-by: CrazyMax <crazy-max@users.noreply.github.com >
2022-08-20 21:03:51 +02:00
662759718c
Merge pull request #226 from thaJeztah/bump_go_1.18.5
...
update to go 1.18.5
2022-08-20 20:59:20 +02:00
fd0197473f
update to go 1.18.5
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2022-08-20 20:49:39 +02:00
Sebastiaan van Stijn