|
1 | 1 | include make/test-unit.mk |
2 | 2 | include make/ark/02_mod.mk |
3 | | -include make/extra_tools.mk |
4 | 3 |
|
5 | 4 | GITHUB_OUTPUT ?= /dev/stderr |
6 | 5 | .PHONY: release |
@@ -77,22 +76,31 @@ helm-plugins: $(NEEDS_HELM) |
77 | 76 | echo "helm-diff plugin already installed"; \ |
78 | 77 | fi |
79 | 78 |
|
80 | | -.PHONY: verify-govulncheck |
81 | | -## Verify all Go modules for vulnerabilities using govulncheck Copied from makefile-modules |
82 | | -## @category [shared] Generate/ Verify |
83 | | -# |
84 | | -# Runs `govulncheck` on all Go modules related to the project. |
85 | | -# Ignores Go modules among the temporary build artifacts in _bin, to avoid |
86 | | -# scanning the code of the vendored Go, after running make vendor-go. |
87 | | -# Ignores Go modules in make/_shared, because those will be checked in centrally |
88 | | -# in the makefile_modules repository. |
89 | | -verify-govulncheck: | $(NEEDS_GOVULNCHECK) |
90 | | - @find . -name go.mod -not \( -path "./$(bin_dir)/*" -or -path "./make/_shared/*" \) \ |
91 | | - | while read d; do \ |
92 | | - target=$$(dirname $${d}); \ |
93 | | - echo "Running 'GOTOOLCHAIN=go$(VENDORED_GO_VERSION) $(bin_dir)/tools/govulncheck ./...' in directory '$${target}'"; \ |
94 | | - pushd "$${target}" >/dev/null; \ |
95 | | - GOTOOLCHAIN=go$(VENDORED_GO_VERSION) $(GOVULNCHECK) ./... || exit; \ |
96 | | - popd >/dev/null; \ |
97 | | - echo ""; \ |
98 | | - done |
| 79 | +# https://docs.venafi.cloud/vaas/venctl/c-venctl-releases/ |
| 80 | +venctl_linux_amd64_SHA256SUM=26e7b7a7e134f1cf1f3ffacf4ae53ec6849058db5007ce4088d51f404ededb4a |
| 81 | +venctl_darwin_amd64_SHA256SUM=2e76693901abcb2c018f66d3a10558c66ca09d1a3be912258bcd6c58e89aae80 |
| 82 | +venctl_darwin_arm64_SHA256SUM=4350912d67683773302655e2a0151320514d1ccf82ee99c895e6780f86b6f031 |
| 83 | + |
| 84 | +.PRECIOUS: $(DOWNLOAD_DIR)/tools/venctl@$(VENCTL_VERSION)_$(HOST_OS)_$(HOST_ARCH) |
| 85 | +$(DOWNLOAD_DIR)/tools/venctl@$(VENCTL_VERSION)_$(HOST_OS)_$(HOST_ARCH): | $(DOWNLOAD_DIR)/tools |
| 86 | + @source $(lock_script) $@; \ |
| 87 | + $(CURL) https://dl.venafi.cloud/venctl/$(VENCTL_VERSION)/venctl-$(HOST_OS)-$(HOST_ARCH).zip -o $(outfile).zip; \ |
| 88 | + $(checkhash_script) $(outfile).zip $(venctl_$(HOST_OS)_$(HOST_ARCH)_SHA256SUM); \ |
| 89 | + unzip -p $(outfile).zip venctl > $(outfile); \ |
| 90 | + chmod +x $(outfile); \ |
| 91 | + rm -f $(outfile).zip |
| 92 | + |
| 93 | +# https://github.com/smallstep/cli/releases/ |
| 94 | +step_linux_amd64_SHA256SUM=2908f3c7d90181eec430070b231da5c0861e37537bf8e2388d031d3bd6c7b8c6 |
| 95 | +step_linux_arm64_SHA256SUM=96636a6cc980d53a98c72aa3b99e04f0b874a733d9ddf43fc6b0f1725f425c37 |
| 96 | +step_darwin_amd64_SHA256SUM=f6e9a9078cfc5f559c8213e023df6e8ebf8d9d36ffbd82749a41ee1c40a23623 |
| 97 | +step_darwin_arm64_SHA256SUM=b856702ee138a9badbe983e88758c0330907ea4f97e429000334ba038597db5b |
| 98 | + |
| 99 | +.PRECIOUS: $(DOWNLOAD_DIR)/tools/step@$(STEP_VERSION)_$(HOST_OS)_$(HOST_ARCH) |
| 100 | +$(DOWNLOAD_DIR)/tools/step@$(STEP_VERSION)_$(HOST_OS)_$(HOST_ARCH): | $(DOWNLOAD_DIR)/tools |
| 101 | + @source $(lock_script) $@; \ |
| 102 | + $(CURL) https://dl.smallstep.com/gh-release/cli/gh-release-header/v$(STEP_VERSION)/step_$(HOST_OS)_$(STEP_VERSION)_$(HOST_ARCH).tar.gz -o $(outfile).tar.gz; \ |
| 103 | + $(checkhash_script) $(outfile).tar.gz $(step_$(HOST_OS)_$(HOST_ARCH)_SHA256SUM); \ |
| 104 | + tar xfO $(outfile).tar.gz step_$(STEP_VERSION)/bin/step > $(outfile); \ |
| 105 | + chmod +x $(outfile); \ |
| 106 | + rm -f $(outfile).tar.gz |
0 commit comments