fix: high cardinality policy_violations metrics

.github/workflows/release.yaml

@@ -12,31 +12,31 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: Fetch all tags
         run: git fetch --force --tags
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7
+        uses: docker/setup-qemu-action@v3
 
       - name: Login to ghcr.io
-        uses: docker/login-action@465a07811f14bebb1938fbed4728c6a1ff8901fc
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up Go
-        uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753
+        uses: actions/setup-go@v5
         with:
-          go-version: "1.20.x"
+          go-version-file: 'go.mod'
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@336e29918d653399e599bfca99fadc1d7ffbc9f7
+        uses: goreleaser/goreleaser-action@v6
         with:
-          args: release --rm-dist
+          args: release 
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/test-and-build.yaml

@@ -10,15 +10,15 @@ jobs:
       contents: read
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
+        uses: actions/checkout@v4
 
       - name: Unshallow
         run: git fetch --prune --unshallow
 
       - name: Set up Go
-        uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753
+        uses: actions/setup-go@v5
         with:
-          go-version: "1.20.x"
+          go-version-file: 'go.mod'
 
       - name: Test
         run: go test -short -v ./...
@@ -30,19 +30,19 @@ jobs:
       packages: write
     steps:
       - name: Checkout
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9
+        uses: actions/checkout@v4
 
       - name: Unshallow
         run: git fetch --prune --unshallow
 
       - name: Set up Go
-        uses: actions/setup-go@fac708d6674e30b6ba41289acaab6d4b75aa0753
+        uses: actions/setup-go@v5
         with:
-          go-version: "1.20.x"
+          go-version-file: 'go.mod'
 
       - name: Run GoReleaser
-        uses: goreleaser/goreleaser-action@336e29918d653399e599bfca99fadc1d7ffbc9f7
+        uses: goreleaser/goreleaser-action@v6
         with:
-          args: --snapshot --skip-sign --skip-validate --skip-publish --rm-dist
+          args: --snapshot --skip validate
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.goreleaser.yaml

@@ -21,11 +21,11 @@ builds:
       -X github.com/prometheus/common/version.BuildDate={{.Date}}
 release:
   github:
-    owner: jetstack
+    owner: dwalker-sabiogroup
     name: dependency-track-exporter
 dockers:
   - image_templates:
-      - "ghcr.io/jetstack/dependency-track-exporter:{{.Version}}-amd64"
+      - "ghcr.io/dwalker-sabiogroup/dependency-track-exporter:{{.Version}}-amd64"
     dockerfile: Dockerfile.goreleaser
     use: buildx
     build_flag_templates:
@@ -37,7 +37,7 @@ dockers:
       - "--label=org.opencontainers.image.source={{.GitURL}}"
       - "--platform=linux/amd64"
   - image_templates:
-      - "ghcr.io/jetstack/dependency-track-exporter:{{.Version}}-arm64"
+      - "ghcr.io/dwalker-sabiogroup/dependency-track-exporter:{{.Version}}-arm64"
     dockerfile: Dockerfile.goreleaser
     use: buildx
     build_flag_templates:
@@ -50,11 +50,11 @@ dockers:
       - "--platform=linux/arm64"
     goarch: arm64
 docker_manifests:
-  - name_template: "ghcr.io/jetstack/dependency-track-exporter:{{.Version}}"
+  - name_template: "ghcr.io/dwalker-sabiogroup/dependency-track-exporter:{{.Version}}"
     image_templates:
-      - "ghcr.io/jetstack/dependency-track-exporter:{{.Version}}-amd64"
-      - "ghcr.io/jetstack/dependency-track-exporter:{{.Version}}-arm64"
-  - name_template: "ghcr.io/jetstack/dependency-track-exporter:latest"
+      - "ghcr.io/dwalker-sabiogroup/dependency-track-exporter:{{.Version}}-amd64"
+      - "ghcr.io/dwalker-sabiogroup/dependency-track-exporter:{{.Version}}-arm64"
+  - name_template: "ghcr.io/dwalker-sabiogroup/dependency-track-exporter:latest"
     image_templates:
-      - "ghcr.io/jetstack/dependency-track-exporter:{{.Version}}-amd64"
-      - "ghcr.io/jetstack/dependency-track-exporter:{{.Version}}-arm64"
+      - "ghcr.io/dwalker-sabiogroup/dependency-track-exporter:{{.Version}}-amd64"
+      - "ghcr.io/dwalker-sabiogroup/dependency-track-exporter:{{.Version}}-arm64"

README.md

@@ -18,6 +18,8 @@ Flags:
                             Dependency-Track server address (default: http://localhost:8080 or $DEPENDENCY_TRACK_ADDR)
       --dtrack.api-key=DTRACK.API-KEY
                             Dependency-Track API key (default: $DEPENDENCY_TRACK_API_KEY)
+      --[no-]exporter.reduce-policy-cardinality  
+                            Initialize all policy_violations metric label values (can also be set with $EXPORTER_REDUCE_POLICY_CARDINALITY)
       --log.level=info      Only log messages with the given severity or above. One of: [debug, info, warn, error]
       --log.format=logfmt   Output format of log messages. One of: [logfmt, json]
       --version             Show application version.

go.mod

@@ -1,39 +1,45 @@
-module github.com/jetstack/dependency-track-exporter
+module github.com/dwalker-sabiogroup/dependency-track-exporter
 
-go 1.20
+go 1.22
 
 require (
-	github.com/DependencyTrack/client-go v0.11.0
-	github.com/alecthomas/kingpin/v2 v2.3.2
+	github.com/DependencyTrack/client-go v0.13.0
+	github.com/alecthomas/kingpin/v2 v2.4.0
 	github.com/go-kit/log v0.2.1
-	github.com/google/go-cmp v0.5.9
-	github.com/google/uuid v1.3.0
-	github.com/prometheus/client_golang v1.16.0
-	github.com/prometheus/common v0.44.0
-	github.com/prometheus/exporter-toolkit v0.10.0
+	github.com/google/go-cmp v0.6.0
+	github.com/google/uuid v1.6.0
+	github.com/prometheus/client_golang v1.19.1
+	github.com/prometheus/common v0.55.0
+	github.com/prometheus/exporter-toolkit v0.11.0
 )
 
 require (
-	github.com/alecthomas/units v0.0.0-20211218093645-b94a6e3cc137 // indirect
+	github.com/alecthomas/units v0.0.0-20240626203959-61d1e3462e30 // indirect
 	github.com/beorn7/perks v1.0.1 // indirect
-	github.com/cespare/xxhash/v2 v2.2.0 // indirect
+	github.com/cespare/xxhash/v2 v2.3.0 // indirect
 	github.com/coreos/go-systemd/v22 v22.5.0 // indirect
-	github.com/go-logfmt/logfmt v0.5.1 // indirect
-	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/felixge/httpsnoop v1.0.4 // indirect
+	github.com/go-logfmt/logfmt v0.6.0 // indirect
+	github.com/go-logr/logr v1.4.2 // indirect
+	github.com/go-logr/stdr v1.2.2 // indirect
 	github.com/jpillora/backoff v1.0.0 // indirect
-	github.com/kr/text v0.2.0 // indirect
-	github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
+	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f // indirect
-	github.com/prometheus/client_model v0.4.0 // indirect
-	github.com/prometheus/procfs v0.10.1 // indirect
+	github.com/prometheus/client_model v0.6.1 // indirect
+	github.com/prometheus/procfs v0.15.1 // indirect
+	github.com/samber/slog-http v1.4.1 // indirect
+	github.com/samber/slog-otel v0.0.0-20240701120852-8150bb781d6a // indirect
 	github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
-	golang.org/x/crypto v0.8.0 // indirect
-	golang.org/x/net v0.10.0 // indirect
-	golang.org/x/oauth2 v0.8.0 // indirect
-	golang.org/x/sync v0.2.0 // indirect
-	golang.org/x/sys v0.8.0 // indirect
-	golang.org/x/text v0.9.0 // indirect
-	google.golang.org/appengine v1.6.7 // indirect
-	google.golang.org/protobuf v1.30.0 // indirect
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 // indirect
+	go.opentelemetry.io/otel v1.28.0 // indirect
+	go.opentelemetry.io/otel/metric v1.28.0 // indirect
+	go.opentelemetry.io/otel/trace v1.28.0 // indirect
+	golang.org/x/crypto v0.25.0 // indirect
+	golang.org/x/net v0.27.0 // indirect
+	golang.org/x/oauth2 v0.21.0 // indirect
+	golang.org/x/sync v0.7.0 // indirect
+	golang.org/x/sys v0.22.0 // indirect
+	golang.org/x/text v0.16.0 // indirect
+	google.golang.org/protobuf v1.34.2 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect
 )