bump to go1.19 and other updates

cpanato · cpanato · commit 5f9a12a57d09 · 2022-09-27T12:32:44.000+02:00
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -9,3 +9,4 @@ updates:
   directory: "/"
   schedule:
     interval: weekly
+  open-pull-requests-limit: 10
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -12,7 +12,7 @@ jobs:
     - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3.0.0
     - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # v3.0.0
       with:
-        go-version: 1.18
+        go-version: 1.19
         check-latest: true
 
     - name: Tests
@@ -28,11 +28,10 @@ jobs:
       - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v2.4.0
       - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # v2.2.0
         with:
-          go-version: 1.18
+          go-version: 1.19
           check-latest: true
       - name: golangci-lint
         uses: golangci/golangci-lint-action@537aa1903e5d359d0b27dbc19ddd22c5087f3fbc # v3
         timeout-minutes: 5
         with:
-          # Required: the version of golangci-lint is required and must be specified without patch version: we always use the latest patch version.
-          version: v1.45.2
+          version: latest
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -22,11 +22,11 @@ jobs:
     steps:
     - uses: actions/setup-go@268d8c0ca0432bb2cf416faae41297df9d262d7f # v3.0.0
       with:
-        go-version: 1.18
+        go-version: 1.19
         check-latest: true
 
-    - name: Install cosign
-      uses: sigstore/cosign-installer@ced07f21fb1da67979f539bbc6304c16c0677e76 # v2.2.1
+    - uses: sigstore/cosign-installer@ced07f21fb1da67979f539bbc6304c16c0677e76 # v2.7.0
+    - uses: anchore/sbom-action/download-syft@b5042e9d19d8b32849779bfe17673ff84aec702d # v0.11.0
 
     - name: Install GoReleaser
       uses: goreleaser/goreleaser-action@ff11ca24a9b39f2d36796d1fbd7a4e39c182630a # v2.9.1
diff --git a/.gitignore b/.gitignore
@@ -19,3 +19,4 @@ github-actions-exporter
 .vscode/
 dist/
 .idea/
+/github_actions_exporter
diff --git a/.goreleaser.yml b/.goreleaser.yml
@@ -114,4 +114,4 @@ release:
     owner: cpanato
     name: github_actions_exporter
   draft: false
-  prerelease: true
+  prerelease: allow
diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM ghcr.io/distroless/busybox:latest
+FROM cgr.dev/chainguard/static:latest
 
 COPY github-actions-exporter /bin/github-actions-exporter
 
diff --git a/go.mod b/go.mod
@@ -1,10 +1,10 @@
 module github.com/cpanato/github_actions_exporter
 
-go 1.18
+go 1.19
 
 require (
 	github.com/go-kit/kit v0.12.0
-	github.com/google/go-github/v43 v43.0.0
+	github.com/google/go-github/v47 v47.1.0
 	github.com/prometheus/client_golang v1.13.0
 	github.com/prometheus/common v0.37.0
 	github.com/stretchr/testify v1.8.0
diff --git a/go.sum b/go.sum
@@ -117,9 +117,9 @@ github.com/google/go-cmp v0.5.1/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/
 github.com/google/go-cmp v0.5.2/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.4/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
 github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE=
-github.com/google/go-cmp v0.5.8 h1:e6P7q2lk1O+qJJb4BtCQXlK8vWEO8V1ZeuEdJNOqZyg=
-github.com/google/go-github/v43 v43.0.0 h1:y+GL7LIsAIF2NZlJ46ZoC/D1W1ivZasT0lnWHMYPZ+U=
-github.com/google/go-github/v43 v43.0.0/go.mod h1:ZkTvvmCXBvsfPpTHXnH/d2hP9Y0cTbvN9kr5xqyXOIc=
+github.com/google/go-cmp v0.5.9 h1:O2Tfq5qg4qc4AmwVlvv0oLiVAGB7enBSJ2x2DqQFi38=
+github.com/google/go-github/v47 v47.1.0 h1:Cacm/WxQBOa9lF0FT0EMjZ2BWMetQ1TQfyurn4yF1z8=
+github.com/google/go-github/v47 v47.1.0/go.mod h1:VPZBXNbFSJGjyjFRUKo9vZGawTajnWzC/YjGw/oFKi0=
 github.com/google/go-querystring v1.1.0 h1:AnCroh3fv4ZBgVIf1Iwtovgjaw/GiKJo8M8yD/fhyJ8=
 github.com/google/go-querystring v1.1.0/go.mod h1:Kcdr2DB4koayq7X8pmAG4sNG59So17icRSOU623lUBU=
 github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
diff --git a/internal/server/billing_metrics_exporter.go b/internal/server/billing_metrics_exporter.go
@@ -7,7 +7,7 @@ import (
 
 	"github.com/go-kit/kit/log"
 	"github.com/go-kit/kit/log/level"
-	"github.com/google/go-github/v43/github"
+	"github.com/google/go-github/v47/github"
 	"golang.org/x/oauth2"
 )
 
diff --git a/internal/server/server_test.go b/internal/server/server_test.go
@@ -10,7 +10,7 @@ import (
 
 	"github.com/cpanato/github_actions_exporter/internal/server"
 	"github.com/go-kit/kit/log"
-	"github.com/google/go-github/v43/github"
+	"github.com/google/go-github/v47/github"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
diff --git a/internal/server/workflow_metrics_exporter.go b/internal/server/workflow_metrics_exporter.go
@@ -15,7 +15,7 @@ import (
 	"github.com/cpanato/github_actions_exporter/model"
 	"github.com/go-kit/kit/log"
 	"github.com/go-kit/kit/log/level"
-	"github.com/google/go-github/v43/github"
+	"github.com/google/go-github/v47/github"
 )
 
 // WorkflowMetricsExporter struct to hold some information
diff --git a/internal/server/workflow_metrics_exporter_test.go b/internal/server/workflow_metrics_exporter_test.go
@@ -16,7 +16,7 @@ import (
 
 	"github.com/cpanato/github_actions_exporter/internal/server"
 	"github.com/go-kit/kit/log"
-	"github.com/google/go-github/v43/github"
+	"github.com/google/go-github/v47/github"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )
diff --git a/model/check_run_event.go b/model/check_run_event.go
@@ -4,7 +4,7 @@ import (
 	"encoding/json"
 	"io"
 
-	"github.com/google/go-github/v43/github"
+	"github.com/google/go-github/v47/github"
 )
 
 // CheckRunEventFromJSON decodes the incomming message to a github.CheckRunEvent
diff --git a/model/ping_event.go b/model/ping_event.go
@@ -4,7 +4,7 @@ import (
 	"encoding/json"
 	"io"
 
-	"github.com/google/go-github/v43/github"
+	"github.com/google/go-github/v47/github"
 )
 
 // PingEventFromJSON decodes the incomming message to a github.PingEvent
diff --git a/model/workflow_job_event.go b/model/workflow_job_event.go
@@ -4,7 +4,7 @@ import (
 	"encoding/json"
 	"io"
 
-	"github.com/google/go-github/v43/github"
+	"github.com/google/go-github/v47/github"
 )
 
 func WorkflowJobEventFromJSON(data io.Reader) *github.WorkflowJobEvent {
diff --git a/model/workflow_run_event.go b/model/workflow_run_event.go
@@ -4,7 +4,7 @@ import (
 	"encoding/json"
 	"io"
 
-	"github.com/google/go-github/v43/github"
+	"github.com/google/go-github/v47/github"
 )
 
 func WorkflowRunEventFromJSON(data io.Reader) *github.WorkflowRunEvent {

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM ghcr.io/distroless/busybox:latest`
	`1`	`+FROM cgr.dev/chainguard/static:latest`
`2`	`2`
`3`	`3`	`COPY github-actions-exporter /bin/github-actions-exporter`
`4`	`4`
Original file line number	Diff line number	Diff line change
`@@ -7,7 +7,7 @@ import (`
`7`	`7`
`8`	`8`	`"github.com/go-kit/kit/log"`
`9`	`9`	`"github.com/go-kit/kit/log/level"`
`10`		`- "github.com/google/go-github/v43/github"`
	`10`	`+ "github.com/google/go-github/v47/github"`
`11`	`11`	`"golang.org/x/oauth2"`
`12`	`12`	`)`
`13`	`13`
Original file line number	Diff line number	Diff line change
`@@ -10,7 +10,7 @@ import (`
`10`	`10`
`11`	`11`	`"github.com/cpanato/github_actions_exporter/internal/server"`
`12`	`12`	`"github.com/go-kit/kit/log"`
`13`		`- "github.com/google/go-github/v43/github"`
	`13`	`+ "github.com/google/go-github/v47/github"`
`14`	`14`	`"github.com/stretchr/testify/assert"`
`15`	`15`	`"github.com/stretchr/testify/require"`
`16`	`16`	`)`