Skip to content

Commit ea8d3ed

Browse files
openshift-pipelines-botopenshift-pipelines-bot
authored andcommitted
[bot] Update next from tektoncd/chains to 65f8d90
$ git diff --stat 65f8d90df06be35f440f832dd6245e40019709f0..0c9284f740d672930274efbe75033df55dc78515 .github/workflows/codeql.yml | 8 +- .github/workflows/go-coverage.yml | 65 + .github/workflows/kind-e2e.yaml | 26 +- .github/workflows/lint.yaml | 4 +- .github/workflows/reusable-e2e.yaml | 30 +- .github/workflows/test-on-crc.yaml | 76 - .github/workflows/test-on-microshift.yaml | 69 + .golangci.yaml | 73 +- OWNERS | 2 + README.md | 19 +- config/100-deployment.yaml | 22 + docs/config.md | 13 +- docs/metrics.md | 22 +- docs/predicate/slsa/v2.md | 4 +- docs/signing.md | 2 +- docs/tutorials/images/chains-gcs-abstract.png | Bin 0 -> 234347 bytes .../images/workload-identity-federation.png | Bin 0 -> 715150 bytes docs/tutorials/provenance-storage-gcs-tutorial.md | 331 + go.mod | 439 +- go.sum | 1903 +- pkg/artifacts/signable.go | 41 - pkg/artifacts/signable_test.go | 197 +- pkg/chains/annotations.go | 46 +- pkg/chains/annotations_test.go | 160 +- pkg/chains/constants.go | 37 - pkg/chains/formats/slsa/attest/attest.go | 7 +- pkg/chains/formats/slsa/extract/extract.go | 53 +- pkg/chains/formats/slsa/extract/v1beta1/extract.go | 200 - .../formats/slsa/extract/v1beta1/extract_test.go | 366 - .../build_definition/build_definition_test.go | 10 +- .../external_parameters_test.go | 8 +- .../internal_parameters_test.go | 4 +- .../formats/slsa/internal/material/material.go | 51 - .../slsa/internal/material/material_test.go | 90 +- .../slsa/internal/material/v1beta1/material.go | 341 - .../internal/material/v1beta1/material_test.go | 624 - .../resolved_dependencies/resolved_dependencies.go | 25 +- .../resolved_dependencies_test.go | 99 +- .../formats/slsa/internal/results/results.go | 4 +- .../formats/slsa/internal/results/results_test.go | 18 +- .../pipeline-v1/taskrun-multiple-subjects.json | 5 + .../taskrun3.json | 2 +- .../taskrun4.json | 2 +- .../taskrun5.json | 0 .../pipeline-v1beta1/pipelinerun-childrefs.json | 129 - .../testdata/pipeline-v1beta1/pipelinerun1.json | 388 - .../pipelinerun_structured_results.json | 264 - .../taskrun-multiple-subjects.json | 56 - .../slsa/testdata/pipeline-v1beta1/taskrun1.json | 136 - .../slsa/testdata/pipeline-v1beta1/taskrun2.json | 105 - pkg/chains/formats/slsa/v1/intotoite6.go | 27 +- pkg/chains/formats/slsa/v1/intotoite6_test.go | 94 +- .../formats/slsa/v1/pipelinerun/pipelinerun.go | 30 +- .../formats/slsa/v1/pipelinerun/provenance_test.go | 188 +- pkg/chains/formats/slsa/v1/taskrun/buildconfig.go | 8 +- .../formats/slsa/v1/taskrun/buildconfig_test.go | 10 +- .../formats/slsa/v1/taskrun/provenance_test.go | 97 +- pkg/chains/formats/slsa/v1/taskrun/taskrun.go | 14 +- .../internal/pipelinerun/pipelinerun_test.go | 6 +- .../slsa/v2alpha3/internal/taskrun/taskrun_test.go | 2 +- pkg/chains/formats/slsa/v2alpha3/slsav2_test.go | 24 +- .../v2alpha4/internal/pipelinerun/pipelinerun.go | 4 +- .../internal/pipelinerun/pipelinerun_test.go | 52 +- .../slsa/v2alpha4/internal/taskrun/taskrun.go | 8 +- .../slsa/v2alpha4/internal/taskrun/taskrun_test.go | 12 +- pkg/chains/formats/slsa/v2alpha4/slsav2_test.go | 16 +- pkg/chains/objects/objects.go | 397 +- pkg/chains/objects/objects_test.go | 82 - pkg/chains/signing.go | 44 +- pkg/chains/signing/kms/kms_test.go | 7 +- pkg/chains/signing/x509/x509.go | 2 +- pkg/chains/signing/x509/x509_test.go | 6 +- pkg/chains/signing_test.go | 60 + pkg/chains/storage/archivista/archivista.go | 101 + pkg/chains/storage/archivista/archivista_test.go | 142 + pkg/chains/storage/docdb/docdb.go | 2 +- pkg/chains/storage/docdb/docdb_test.go | 6 +- pkg/chains/storage/gcs/gcs.go | 44 +- pkg/chains/storage/gcs/gcs_test.go | 1 - pkg/chains/storage/grafeas/grafeas_test.go | 62 +- pkg/chains/storage/oci/attestation.go | 5 +- pkg/chains/storage/oci/attestation_test.go | 111 + pkg/chains/storage/oci/legacy.go | 5 +- pkg/chains/storage/oci/oci_test.go | 22 +- pkg/chains/storage/oci/simple.go | 5 +- pkg/chains/storage/oci/simple_test.go | 110 + pkg/chains/storage/pubsub/pubsub_test.go | 12 +- pkg/chains/storage/storage.go | 8 +- pkg/chains/storage/tekton/tekton.go | 41 +- pkg/chains/storage/tekton/tekton_test.go | 159 +- pkg/chains/verifier.go | 12 +- pkg/config/config.go | 40 +- pkg/config/config_test.go | 87 + pkg/config/store_test.go | 102 + pkg/internal/objectloader/objectloader.go | 29 +- pkg/metrics/common.go | 45 + pkg/patch/patch.go | 51 +- pkg/patch/patch_test.go | 25 +- pkg/pipelinerunmetrics/metrics.go | 77 +- pkg/pipelinerunmetrics/metrics_test.go | 60 +- pkg/reconciler/filter.go | 19 +- pkg/reconciler/pipelinerun/pipelinerun_test.go | 3 +- pkg/reconciler/taskrun/controller.go | 2 +- pkg/reconciler/taskrun/taskrun.go | 14 + pkg/taskrunmetrics/metrics.go | 77 +- pkg/taskrunmetrics/metrics_test.go | 62 +- pkg/test/tekton/tekton.go | 27 - release/README.md | 8 - release/publish.yaml | 11 +- release/release-pipeline.yaml | 24 +- releases.md | 14 + test/clients.go | 2 +- test/e2e-common.sh | 6 +- test/e2e-tests.sh | 13 +- test/e2e_test.go | 108 +- test/examples_test.go | 93 +- test/{crc_test.sh => microshift_test.sh} | 26 +- test/test_utils.go | 53 +- test/testdata/slsa/v1/pipeline-output-image.json | 2 +- test/testdata/slsa/v1/task-output-image.json | 2 +- test/testdata/slsa/v2/task-output-image.json | 2 +- .../pipeline-with-object-type-hinting.json | 2 +- .../v2alpha4/pipeline-with-repeated-results.json | 25 +- .../v2alpha4/task-with-object-type-hinting.json | 2 +- test/testdata/spire.yaml | 41 +- .../checkcompilerdirectives.go | 11 +- .../checknoglobals/check_no_globals.go | 14 - vendor/cel.dev/expr/.bazelversion | 2 +- vendor/cel.dev/expr/MODULE.bazel | 34 +- vendor/cel.dev/expr/README.md | 2 - vendor/cel.dev/expr/cloudbuild.yaml | 2 +- vendor/cel.dev/expr/eval.pb.go | Bin 15041 -> 15803 bytes .../go/.release-please-manifest-individual.json | 30 +- .../go/.release-please-manifest-submodules.json | 310 +- .../go/.release-please-manifest.json | 2 +- vendor/cloud.google.com/go/CHANGES.md | 116 + vendor/cloud.google.com/go/CONTRIBUTING.md | 29 +- vendor/cloud.google.com/go/README.md | 56 +- vendor/cloud.google.com/go/auth/CHANGES.md | 65 + vendor/cloud.google.com/go/auth/auth.go | 4 +- .../go/auth/credentials/compute.go | 24 +- .../cloud.google.com/go/auth/credentials/detect.go | 40 +- .../go/auth/credentials/filetypes.go | 2 + .../go/auth/credentials/idtoken/idtoken.go | 16 + .../go/auth/credentials/impersonate/user.go | 1 + .../internal/externalaccount/externalaccount.go | 5 +- .../internal/externalaccount/x509_provider.go | 173 +- .../go/auth/grpctransport/directpath.go | 65 +- .../go/auth/grpctransport/grpctransport.go | 31 +- .../go/auth/internal/credsfile/filetype.go | 1 + .../go/auth/internal/transport/cba.go | 55 +- .../auth/internal/transport/cert/workload_cert.go | 38 +- .../go/auth/internal/transport/transport.go | 5 +- .../go/auth/oauth2adapt/CHANGES.md | 7 + vendor/cloud.google.com/go/civil/civil.go | 500 + .../go/compute/metadata/CHANGES.md | 14 + .../go/compute/metadata/metadata.go | 194 +- .../go/compute/metadata/syscheck.go | 4 +- .../go/compute/metadata/syscheck_linux.go | 4 +- .../go/compute/metadata/syscheck_windows.go | 3 +- vendor/cloud.google.com/go/debug.md | 161 +- vendor/cloud.google.com/go/doc.go | 30 +- .../go/firestore/apiv1/auxiliary.go | 8 +- vendor/cloud.google.com/go/firestore/apiv1/doc.go | 31 +- .../go/firestore/apiv1/firestore_client.go | 247 +- .../apiv1/firestorepb/aggregation_result.pb.go | 26 +- .../firestore/apiv1/firestorepb/bloom_filter.pb.go | 48 +- .../go/firestore/apiv1/firestorepb/common.pb.go | 114 +- .../go/firestore/apiv1/firestorepb/document.pb.go | 92 +- .../go/firestore/apiv1/firestorepb/firestore.pb.go | 686 +- .../go/firestore/apiv1/firestorepb/query.pb.go | 356 +- .../apiv1/firestorepb/query_profile.pb.go | 92 +- .../go/firestore/apiv1/firestorepb/write.pb.go | 180 +- .../cloud.google.com/go/firestore/apiv1/helpers.go | 102 + .../go/firestore/internal/version.go | 2 +- vendor/cloud.google.com/go/go.work | 21 +- vendor/cloud.google.com/go/go.work.sum | 184 +- vendor/cloud.google.com/go/iam/CHANGES.md | 58 + .../go/iam/apiv1/iampb/iam_policy.pb.go | 94 +- .../go/iam/apiv1/iampb/options.pb.go | 28 +- .../go/iam/apiv1/iampb/policy.pb.go | 160 +- .../iam/apiv1/iampb/resource_policy_member.pb.go | 185 + .../go/internal/.repo-metadata-full.json | 488 +- .../cloud.google.com/go/internal/fields/fields.go | 482 + vendor/cloud.google.com/go/internal/fields/fold.go | 154 + .../go/internal/protostruct/protostruct.go | 56 + vendor/cloud.google.com/go/internal/trace/trace.go | 208 +- .../go/kms/apiv1/autokey_admin_client.go | 6 +- .../go/kms/apiv1/autokey_client.go | 6 +- vendor/cloud.google.com/go/kms/apiv1/auxiliary.go | 2 +- .../go/kms/apiv1/auxiliary_go123.go | 2 +- vendor/cloud.google.com/go/kms/apiv1/doc.go | 2 +- vendor/cloud.google.com/go/kms/apiv1/ekm_client.go | 6 +- vendor/cloud.google.com/go/kms/apiv1/helpers.go | 8 +- .../go/kms/apiv1/key_management_client.go | 9 +- .../go/kms/apiv1/kmspb/autokey.pb.go | 11 +- .../go/kms/apiv1/kmspb/autokey_admin.pb.go | 174 +- .../go/kms/apiv1/kmspb/ekm_service.pb.go | 13 +- .../go/kms/apiv1/kmspb/resources.pb.go | 763 +- .../go/kms/apiv1/kmspb/service.pb.go | 1938 +- vendor/cloud.google.com/go/kms/internal/version.go | 2 +- vendor/cloud.google.com/go/longrunning/CHANGES.md | 36 + .../go/longrunning/autogen/auxiliary.go | 4 +- .../go/longrunning/autogen/auxiliary_go123.go | 2 +- .../cloud.google.com/go/longrunning/autogen/doc.go | 44 +- .../go/longrunning/autogen/helpers.go | 99 + .../autogen/longrunningpb/operations.pb.go | 265 +- .../go/longrunning/autogen/operations_client.go | 142 +- .../go/monitoring/apiv3/v2/alert_policy_client.go | 16 +- .../go/monitoring/apiv3/v2/auxiliary.go | 30 +- .../go/monitoring/apiv3/v2/auxiliary_go123.go | 2 +- .../cloud.google.com/go/monitoring/apiv3/v2/doc.go | 49 +- .../go/monitoring/apiv3/v2/group_client.go | 18 +- .../go/monitoring/apiv3/v2/helpers.go | 64 + .../go/monitoring/apiv3/v2/metric_client.go | 24 +- .../monitoring/apiv3/v2/monitoringpb/alert.pb.go | 1828 +- .../apiv3/v2/monitoringpb/alert_service.pb.go | 386 +- .../monitoring/apiv3/v2/monitoringpb/common.pb.go | 72 +- .../apiv3/v2/monitoringpb/dropped_labels.pb.go | 28 +- .../monitoring/apiv3/v2/monitoringpb/group.pb.go | 28 +- .../apiv3/v2/monitoringpb/group_service.pb.go | 182 +- .../monitoring/apiv3/v2/monitoringpb/metric.pb.go | 433 +- .../apiv3/v2/monitoringpb/metric_service.pb.go | 1099 +- .../apiv3/v2/monitoringpb/mutation_record.pb.go | 28 +- .../apiv3/v2/monitoringpb/notification.pb.go | 316 +- .../v2/monitoringpb/notification_service.pb.go | 779 +- .../apiv3/v2/monitoringpb/query_service.pb.go | 73 +- .../monitoring/apiv3/v2/monitoringpb/service.pb.go | 558 +- .../apiv3/v2/monitoringpb/service_service.pb.go | 270 +- .../monitoring/apiv3/v2/monitoringpb/snooze.pb.go | 121 +- .../apiv3/v2/monitoringpb/snooze_service.pb.go | 118 +- .../apiv3/v2/monitoringpb/span_context.pb.go | 28 +- .../monitoring/apiv3/v2/monitoringpb/uptime.pb.go | 1039 +- .../apiv3/v2/monitoringpb/uptime_service.pb.go | 186 +- .../apiv3/v2/notification_channel_client.go | 26 +- .../go/monitoring/apiv3/v2/query_client.go | 15 +- .../apiv3/v2/service_monitoring_client.go | 26 +- .../go/monitoring/apiv3/v2/snooze_client.go | 14 +- .../go/monitoring/apiv3/v2/uptime_check_client.go | 20 +- .../go/monitoring/internal/version.go | 2 +- .../go/release-please-config-individual.json | 14 +- .../go/release-please-config-yoshi-submodules.json | 48 +- vendor/cloud.google.com/go/spanner/CHANGES.md | 1431 + .../v3 => cloud.google.com/go/spanner}/LICENSE | 0 vendor/cloud.google.com/go/spanner/README.md | 116 + .../go/spanner/admin/database/apiv1/auxiliary.go | 636 + .../admin/database/apiv1/auxiliary_go123.go | 57 + .../go/spanner/admin/database/apiv1/backup.go | 61 + .../go/spanner/admin/database/apiv1/database.go | 120 + .../admin/database/apiv1/database_admin_client.go | 4104 +++ .../admin/database/apiv1/databasepb/backup.pb.go | 2282 ++ .../apiv1/databasepb/backup_schedule.pb.go | 951 + .../admin/database/apiv1/databasepb/common.pb.go | 522 + .../apiv1/databasepb/spanner_database_admin.pb.go | 5025 +++ .../go/spanner/admin/database/apiv1/doc.go | 84 + .../go/spanner/admin/database/apiv1/helpers.go | 106 + .../go/spanner/admin/database/apiv1/init.go | 41 + .../go/spanner/admin/database/apiv1/path_funcs.go | 49 + .../go/spanner/admin/database/apiv1/version.go} | 19 +- .../cloud.google.com/go/spanner/apiv1/auxiliary.go | 69 + .../go/spanner/apiv1/auxiliary_go123.go | 32 + vendor/cloud.google.com/go/spanner/apiv1/doc.go | 84 + .../cloud.google.com/go/spanner/apiv1/helpers.go | 106 + vendor/cloud.google.com/go/spanner/apiv1/info.go | 24 + .../go/spanner/apiv1/path_funcs.go | 53 + .../go/spanner/apiv1/spanner_client.go | 2321 ++ .../go/spanner/apiv1/spanner_client_options.go | 25 + .../go/spanner/apiv1/spannerpb/change_stream.pb.go | 1545 + .../spanner/apiv1/spannerpb/commit_response.pb.go | 303 + .../go/spanner/apiv1/spannerpb/keys.pb.go | 445 + .../go/spanner/apiv1/spannerpb/mutation.pb.go | 452 + .../go/spanner/apiv1/spannerpb/query_plan.pb.go | 536 + .../go/spanner/apiv1/spannerpb/result_set.pb.go | 702 + .../go/spanner/apiv1/spannerpb/spanner.pb.go | 4998 +++ .../go/spanner/apiv1/spannerpb/transaction.pb.go | 1098 + .../go/spanner/apiv1/spannerpb/type.pb.go | 606 + .../cloud.google.com/go/spanner/apiv1/version.go | 23 + vendor/cloud.google.com/go/spanner/batch.go | 498 + vendor/cloud.google.com/go/spanner/client.go | 1493 + vendor/cloud.google.com/go/spanner/doc.go | 357 + .../cloud.google.com/go/spanner/emulator_test.sh | 51 + vendor/cloud.google.com/go/spanner/errors.go | 243 + vendor/cloud.google.com/go/spanner/grpc_client.go | 382 + vendor/cloud.google.com/go/spanner/grpc_dp.go | 24 + .../go/spanner/internal/version.go | 18 + vendor/cloud.google.com/go/spanner/key.go | 444 + vendor/cloud.google.com/go/spanner/metrics.go | 709 + .../go/spanner/metrics_monitoring_exporter.go | 409 + vendor/cloud.google.com/go/spanner/mutation.go | 522 + vendor/cloud.google.com/go/spanner/ot_metrics.go | 271 + vendor/cloud.google.com/go/spanner/pdml.go | 170 + vendor/cloud.google.com/go/spanner/protoutils.go | 178 + vendor/cloud.google.com/go/spanner/read.go | 946 + .../go/spanner/request_id_header.go | 289 + vendor/cloud.google.com/go/spanner/retry.go | 166 + vendor/cloud.google.com/go/spanner/row.go | 589 + vendor/cloud.google.com/go/spanner/session.go | 2019 ++ .../cloud.google.com/go/spanner/sessionclient.go | 467 + vendor/cloud.google.com/go/spanner/statement.go | 84 + vendor/cloud.google.com/go/spanner/stats.go | 377 + .../cloud.google.com/go/spanner/timestampbound.go | 242 + vendor/cloud.google.com/go/spanner/trace.go | 75 + vendor/cloud.google.com/go/spanner/transaction.go | 2333 ++ vendor/cloud.google.com/go/spanner/value.go | 5955 ++++ vendor/cloud.google.com/go/storage/CHANGES.md | 143 + vendor/cloud.google.com/go/storage/TESTING.md | 53 + vendor/cloud.google.com/go/storage/acl.go | 13 +- vendor/cloud.google.com/go/storage/bucket.go | 60 +- vendor/cloud.google.com/go/storage/client.go | 14 +- vendor/cloud.google.com/go/storage/doc.go | 109 +- .../cloud.google.com/go/storage/emulator_test.sh | 3 +- .../go/storage/experimental/experimental.go | 16 +- vendor/cloud.google.com/go/storage/grpc_client.go | 1479 +- vendor/cloud.google.com/go/storage/grpc_reader.go | 26 +- .../go/storage/grpc_reader_multi_range.go | 40 + vendor/cloud.google.com/go/storage/grpc_writer.go | 783 +- vendor/cloud.google.com/go/storage/http_client.go | 101 +- vendor/cloud.google.com/go/storage/iam.go | 13 +- .../go/storage/internal/apiv2/doc.go | 10 +- .../go/storage/internal/apiv2/helpers.go | 4 + .../go/storage/internal/apiv2/storage_client.go | 16 +- .../storage/internal/apiv2/storagepb/storage.pb.go | 5856 ++-- .../go/storage/internal/experimental.go | 5 + .../go/storage/internal/version.go | 2 +- vendor/cloud.google.com/go/storage/invoke.go | 67 +- .../cloud.google.com/go/storage/notifications.go | 13 +- vendor/cloud.google.com/go/storage/option.go | 16 + vendor/cloud.google.com/go/storage/reader.go | 34 +- vendor/cloud.google.com/go/storage/storage.go | 179 +- vendor/cloud.google.com/go/storage/trace.go | 98 + vendor/cloud.google.com/go/storage/writer.go | 156 +- .../Azure/azure-sdk-for-go/sdk/azcore/CHANGELOG.md | 26 + .../arm/internal/resource/resource_identifier.go | 34 +- .../Azure/azure-sdk-for-go/sdk/azcore/ci.yml | 2 + .../sdk/azcore/internal/exported/exported.go | 7 +- .../sdk/azcore/internal/exported/request.go | 6 +- .../sdk/azcore/internal/shared/constants.go | 2 +- .../azure-sdk-for-go/sdk/azcore/policy/policy.go | 2 +- .../sdk/azcore/runtime/policy_bearer_token.go | 18 +- .../azure-sdk-for-go/sdk/azidentity/CHANGELOG.md | 47 + .../azure-sdk-for-go/sdk/azidentity/MIGRATION.md | 2 +- .../azure-sdk-for-go/sdk/azidentity/README.md | 20 +- .../sdk/azidentity/TOKEN_CACHING.MD | 11 +- .../sdk/azidentity/TROUBLESHOOTING.md | 12 +- .../azure-sdk-for-go/sdk/azidentity/assets.json | 2 +- .../azure-sdk-for-go/sdk/azidentity/azidentity.go | 5 + .../sdk/azidentity/azure_cli_credential.go | 16 +- .../azidentity/azure_developer_cli_credential.go | 11 +- .../Azure/azure-sdk-for-go/sdk/azidentity/ci.yml | 2 +- .../sdk/azidentity/confidential_client.go | 2 +- .../sdk/azidentity/default_azure_credential.go | 164 +- .../sdk/azidentity/environment_credential.go | 17 +- .../azure-sdk-for-go/sdk/azidentity/errors.go | 2 - .../Azure/azure-sdk-for-go/sdk/azidentity/go.work | 2 +- .../sdk/azidentity/managed-identity-matrix.json | 4 +- .../sdk/azidentity/managed_identity_client.go | 437 +- .../sdk/azidentity/managed_identity_credential.go | 28 +- .../sdk/azidentity/public_client.go | 2 +- .../sdk/azidentity/test-resources-post.ps1 | 6 +- .../sdk/azidentity/username_password_credential.go | 12 +- .../azure-sdk-for-go/sdk/azidentity/version.go | 2 +- .../sdk/internal/errorinfo/errorinfo.go | 12 +- .../Azure/azure-sdk-for-go/sdk/internal/log/log.go | 2 +- .../sdk/internal/temporal/resource.go | 51 +- .../sdk/security/keyvault/azkeys/CHANGELOG.md | 23 + .../sdk/security/keyvault/azkeys/README.md | 12 +- .../sdk/security/keyvault/azkeys/_metadata.json | 4 + .../sdk/security/keyvault/azkeys/assets.json | 2 +- .../sdk/security/keyvault/azkeys/autorest.md | 252 - .../sdk/security/keyvault/azkeys/build.go | 8 +- .../sdk/security/keyvault/azkeys/ci.yml | 10 +- .../sdk/security/keyvault/azkeys/client.go | 650 +- .../sdk/security/keyvault/azkeys/constants.go | 216 +- .../sdk/security/keyvault/azkeys/custom_client.go | 5 +- .../sdk/security/keyvault/azkeys/models.go | 56 +- .../sdk/security/keyvault/azkeys/models_serde.go | 290 +- .../sdk/security/keyvault/azkeys/options.go | 17 +- .../security/keyvault/azkeys/platform-matrix.json | 8 +- .../azkeys/{response_types.go => responses.go} | 12 +- .../keyvault/azkeys/test-resources-post.ps1 | 33 +- .../sdk/security/keyvault/azkeys/time_unix.go | 12 +- .../sdk/security/keyvault/azkeys/tsp-location.yaml | 5 + .../sdk/security/keyvault/azkeys/version.go | 5 +- .../sdk/security/keyvault/internal/CHANGELOG.md | 15 + .../security/keyvault/internal/challenge_policy.go | 40 +- .../sdk/security/keyvault/internal/ci.keyvault.yml | 1 + .../sdk/security/keyvault/internal/constants.go | 5 +- .../sdk/security/keyvault/internal/doc.go | 3 - .../security/keyvault/internal/fake_challenge.go | 36 + .../sdk/security/keyvault/internal/parse.go | 4 +- vendor/github.com/Azure/go-ansiterm/LICENSE | 21 + vendor/github.com/Azure/go-ansiterm/README.md | 12 + vendor/github.com/Azure/go-ansiterm/SECURITY.md | 41 + vendor/github.com/Azure/go-ansiterm/constants.go | 188 + vendor/github.com/Azure/go-ansiterm/context.go | 7 + .../Azure/go-ansiterm/csi_entry_state.go | 49 + .../Azure/go-ansiterm/csi_param_state.go | 38 + .../Azure/go-ansiterm/escape_intermediate_state.go | 36 + .../github.com/Azure/go-ansiterm/escape_state.go | 47 + .../github.com/Azure/go-ansiterm/event_handler.go | 90 + .../github.com/Azure/go-ansiterm/ground_state.go | 24 + .../Azure/go-ansiterm/osc_string_state.go | 23 + vendor/github.com/Azure/go-ansiterm/parser.go | 151 + .../Azure/go-ansiterm/parser_action_helpers.go | 99 + .../github.com/Azure/go-ansiterm/parser_actions.go | 119 + vendor/github.com/Azure/go-ansiterm/states.go | 71 + vendor/github.com/Azure/go-ansiterm/utilities.go | 21 + .../github.com/Azure/go-ansiterm/winterm/ansi.go | 196 + vendor/github.com/Azure/go-ansiterm/winterm/api.go | 327 + .../Azure/go-ansiterm/winterm/attr_translation.go | 100 + .../Azure/go-ansiterm/winterm/cursor_helpers.go | 101 + .../Azure/go-ansiterm/winterm/erase_helpers.go | 84 + .../Azure/go-ansiterm/winterm/scroll_helper.go | 118 + .../Azure/go-ansiterm/winterm/utilities.go | 9 + .../Azure/go-ansiterm/winterm/win_event_handler.go | 743 + .../apps/confidential/confidential.go | 61 +- .../apps/errors/errors.go | 9 + .../apps/internal/base/base.go | 61 +- .../internal/base/{internal => }/storage/items.go | 7 +- .../{internal => }/storage/partitioned_storage.go | 3 +- .../base/{internal => }/storage/storage.go | 8 +- .../apps/internal/exported/exported.go | 2 + .../apps/internal/local/server.go | 3 +- .../apps/internal/oauth/oauth.go | 20 +- .../oauth/ops/accesstokens/accesstokens.go | 55 +- .../apps/internal/oauth/ops/accesstokens/tokens.go | 66 +- .../apps/internal/oauth/ops/internal/comm/comm.go | 4 +- .../apps/internal/version/version.go | 2 +- .../apps/managedidentity/azure_ml.go | 28 + .../apps/managedidentity/cloud_shell.go | 37 + .../apps/managedidentity/managedidentity.go | 717 + .../apps/managedidentity/servicefabric.go | 25 + .../apps/public/public.go | 13 +- .../Crocmagnon/fatcontext/pkg/analyzer/analyzer.go | 258 +- .../go-exhaustruct/v3/analyzer/analyzer.go | 2 +- .../grpc-gcp-go/grpcgcp}/LICENSE | 0 .../grpc-gcp-go/grpcgcp/README.md | 18 + .../GoogleCloudPlatform/grpc-gcp-go/grpcgcp/doc.go | 129 + .../grpc-gcp-go/grpcgcp/gcp_balancer.go | 581 + .../grpc-gcp-go/grpcgcp/gcp_interceptor.go | 130 + .../grpc-gcp-go/grpcgcp/gcp_logger.go | 98 + .../grpc-gcp-go/grpcgcp/gcp_multiendpoint.go | 408 + .../grpc-gcp-go/grpcgcp/gcp_picker.go | 276 + .../grpc-gcp-go/grpcgcp/grpc_gcp/codegen.sh | 6 + .../grpc-gcp-go/grpcgcp/grpc_gcp/grpc_gcp.pb.go | 638 + .../grpc-gcp-go/grpcgcp/grpc_gcp/grpc_gcp.proto | 129 + .../grpc-gcp-go/grpcgcp/mockgen.sh | 4 + .../grpc-gcp-go/grpcgcp/multiendpoint/endpoint.go | 54 + .../grpcgcp/multiendpoint/multiendpoint.go | 306 + .../grpc-gcp-go/grpcgcp/test_config.json | 29 + .../exporter/metric/README.md | 9 +- .../exporter/metric/metric.go | 44 +- .../exporter/metric/option.go | 20 +- .../exporter/metric/version.go | 2 +- .../internal/resourcemapping/resourcemapping.go | 3 +- vendor/github.com/IBM/sarama/.golangci.yml | 160 +- .../github.com/IBM/sarama/.pre-commit-config.yaml | 6 +- vendor/github.com/IBM/sarama/Dockerfile.kafka | 43 +- vendor/github.com/IBM/sarama/Makefile | 2 +- vendor/github.com/IBM/sarama/admin.go | 241 +- vendor/github.com/IBM/sarama/async_producer.go | 51 +- vendor/github.com/IBM/sarama/balance_strategy.go | 5 + vendor/github.com/IBM/sarama/broker.go | 37 +- vendor/github.com/IBM/sarama/client.go | 104 +- vendor/github.com/IBM/sarama/config.go | 14 + vendor/github.com/IBM/sarama/consumer_group.go | 26 +- .../github.com/IBM/sarama/create_topics_request.go | 15 + .../github.com/IBM/sarama/delete_topics_request.go | 15 + .../IBM/sarama/describe_client_quotas_request.go | 2 +- vendor/github.com/IBM/sarama/docker-compose.yml | 71 +- .../github.com/IBM/sarama/elect_leaders_request.go | 134 + .../IBM/sarama/elect_leaders_response.go | 173 + vendor/github.com/IBM/sarama/election_type.go | 10 + vendor/github.com/IBM/sarama/entrypoint.sh | 2 +- vendor/github.com/IBM/sarama/errors.go | 2 +- vendor/github.com/IBM/sarama/metrics.go | 6 +- vendor/github.com/IBM/sarama/mockresponses.go | 22 + vendor/github.com/IBM/sarama/produce_set.go | 4 + vendor/github.com/IBM/sarama/real_decoder.go | 2 +- vendor/github.com/IBM/sarama/renovate.json | 6 + vendor/github.com/IBM/sarama/request.go | 3 +- vendor/github.com/IBM/sarama/server.properties | 138 + vendor/github.com/IBM/sarama/sync_producer.go | 32 +- vendor/github.com/IBM/sarama/utils.go | 78 +- .../github.com/OpenPeeDeeP/depguard/v2/README.md | 30 +- .../github.com/OpenPeeDeeP/depguard/v2/depguard.go | 6 +- .../github.com/OpenPeeDeeP/depguard/v2/settings.go | 14 +- vendor/github.com/ProtonMail/go-crypto/AUTHORS | 3 - .../github.com/ProtonMail/go-crypto/CONTRIBUTORS | 3 - vendor/github.com/ProtonMail/go-crypto/LICENSE | 27 - vendor/github.com/ProtonMail/go-crypto/PATENTS | 22 - .../ProtonMail/go-crypto/bitcurves/bitcurve.go | 381 - .../ProtonMail/go-crypto/brainpool/brainpool.go | 134 - .../ProtonMail/go-crypto/brainpool/rcurve.go | 83 - vendor/github.com/ProtonMail/go-crypto/eax/eax.go | 162 - .../ProtonMail/go-crypto/eax/eax_test_vectors.go | 58 - .../ProtonMail/go-crypto/eax/random_vectors.go | 131 - .../go-crypto/internal/byteutil/byteutil.go | 90 - vendor/github.com/ProtonMail/go-crypto/ocb/ocb.go | 313 - .../ProtonMail/go-crypto/ocb/random_vectors.go | 136 - .../go-crypto/ocb/rfc7253_test_vectors_suite_a.go | 78 - .../go-crypto/ocb/rfc7253_test_vectors_suite_b.go | 25 - .../go-crypto/openpgp/aes/keywrap/keywrap.go | 153 - .../ProtonMail/go-crypto/openpgp/armor/armor.go | 183 - .../ProtonMail/go-crypto/openpgp/armor/encode.go | 206 - .../ProtonMail/go-crypto/openpgp/canonical_text.go | 71 - .../ProtonMail/go-crypto/openpgp/ecdh/ecdh.go | 206 - .../ProtonMail/go-crypto/openpgp/ecdsa/ecdsa.go | 80 - .../go-crypto/openpgp/ed25519/ed25519.go | 115 - .../ProtonMail/go-crypto/openpgp/ed448/ed448.go | 119 - .../ProtonMail/go-crypto/openpgp/eddsa/eddsa.go | 91 - .../go-crypto/openpgp/elgamal/elgamal.go | 124 - .../ProtonMail/go-crypto/openpgp/errors/errors.go | 180 - .../ProtonMail/go-crypto/openpgp/hash.go | 24 - .../go-crypto/openpgp/internal/algorithm/aead.go | 65 - .../go-crypto/openpgp/internal/algorithm/cipher.go | 97 - .../go-crypto/openpgp/internal/algorithm/hash.go | 143 - .../go-crypto/openpgp/internal/ecc/curve25519.go | 171 - .../go-crypto/openpgp/internal/ecc/curve_info.go | 143 - .../go-crypto/openpgp/internal/ecc/curves.go | 48 - .../go-crypto/openpgp/internal/ecc/ed25519.go | 120 - .../go-crypto/openpgp/internal/ecc/ed448.go | 119 - .../go-crypto/openpgp/internal/ecc/generic.go | 149 - .../go-crypto/openpgp/internal/ecc/x448.go | 107 - .../openpgp/internal/encoding/encoding.go | 27 - .../go-crypto/openpgp/internal/encoding/mpi.go | 91 - .../go-crypto/openpgp/internal/encoding/oid.go | 88 - .../ProtonMail/go-crypto/openpgp/key_generation.go | 456 - .../ProtonMail/go-crypto/openpgp/keys.go | 901 - .../ProtonMail/go-crypto/openpgp/keys_test_data.go | 538 - .../go-crypto/openpgp/packet/aead_config.go | 67 - .../go-crypto/openpgp/packet/aead_crypter.go | 250 - .../go-crypto/openpgp/packet/aead_encrypted.go | 100 - .../go-crypto/openpgp/packet/compressed.go | 161 - .../ProtonMail/go-crypto/openpgp/packet/config.go | 410 - .../go-crypto/openpgp/packet/config_v5.go | 7 - .../go-crypto/openpgp/packet/encrypted_key.go | 584 - .../ProtonMail/go-crypto/openpgp/packet/literal.go | 91 - .../ProtonMail/go-crypto/openpgp/packet/marker.go | 33 - .../go-crypto/openpgp/packet/notation.go | 29 - .../ProtonMail/go-crypto/openpgp/packet/ocfb.go | 137 - .../go-crypto/openpgp/packet/one_pass_signature.go | 157 - .../ProtonMail/go-crypto/openpgp/packet/opaque.go | 170 - .../ProtonMail/go-crypto/openpgp/packet/packet.go | 675 - .../go-crypto/openpgp/packet/packet_sequence.go | 222 - .../go-crypto/openpgp/packet/packet_unsupported.go | 24 - .../ProtonMail/go-crypto/openpgp/packet/padding.go | 26 - .../go-crypto/openpgp/packet/private_key.go | 1191 - .../openpgp/packet/private_key_test_data.go | 12 - .../go-crypto/openpgp/packet/public_key.go | 1120 - .../openpgp/packet/public_key_test_data.go | 24 - .../ProtonMail/go-crypto/openpgp/packet/reader.go | 209 - .../go-crypto/openpgp/packet/recipient.go | 15 - .../go-crypto/openpgp/packet/signature.go | 1509 - .../openpgp/packet/symmetric_key_encrypted.go | 331 - .../openpgp/packet/symmetrically_encrypted.go | 94 - .../openpgp/packet/symmetrically_encrypted_aead.go | 168 - .../openpgp/packet/symmetrically_encrypted_mdc.go | 256 - .../go-crypto/openpgp/packet/userattribute.go | 100 - .../ProtonMail/go-crypto/openpgp/packet/userid.go | 166 - .../ProtonMail/go-crypto/openpgp/read.go | 619 - .../go-crypto/openpgp/read_write_test_data.go | 457 - .../ProtonMail/go-crypto/openpgp/s2k/s2k.go | 436 - .../ProtonMail/go-crypto/openpgp/s2k/s2k_cache.go | 26 - .../ProtonMail/go-crypto/openpgp/s2k/s2k_config.go | 129 - .../ProtonMail/go-crypto/openpgp/write.go | 620 - .../ProtonMail/go-crypto/openpgp/x25519/x25519.go | 221 - .../ProtonMail/go-crypto/openpgp/x448/x448.go | 229 - vendor/github.com/alingse/nilnesserr/README.md | 4 +- vendor/github.com/alingse/nilnesserr/linter.go | 4 +- vendor/github.com/alingse/nilnesserr/nilness.go | 2 +- vendor/github.com/antlr4-go/antlr/v4/antlrdoc.go | 8 +- vendor/github.com/antlr4-go/antlr/v4/atn.go | 8 +- vendor/github.com/antlr4-go/antlr/v4/atn_config.go | 3 - .../github.com/antlr4-go/antlr/v4/input_stream.go | 2 +- vendor/github.com/antlr4-go/antlr/v4/jcollect.go | 5 +- vendor/github.com/antlr4-go/antlr/v4/lexer.go | 2 +- .../github.com/antlr4-go/antlr/v4/ll1_analyzer.go | 1 + vendor/github.com/antlr4-go/antlr/v4/mutex.go | 41 + .../github.com/antlr4-go/antlr/v4/mutex_nomutex.go | 32 + .../antlr4-go/antlr/v4/parser_atn_simulator.go | 4 +- .../antlr4-go/antlr/v4/prediction_context.go | 60 +- vendor/github.com/antlr4-go/antlr/v4/recognizer.go | 2 +- vendor/github.com/antlr4-go/antlr/v4/statistics.go | 3 +- vendor/github.com/antlr4-go/antlr/v4/token.go | 82 +- vendor/github.com/antlr4-go/antlr/v4/utils.go | 53 + vendor/github.com/aws/aws-sdk-go-v2/aws/config.go | 12 + .../aws/aws-sdk-go-v2/aws/credential_cache.go | 11 + .../aws/aws-sdk-go-v2/aws/credentials.go | 57 + .../aws/aws-sdk-go-v2/aws/go_module_metadata.go | 2 +- .../aws/aws-sdk-go-v2/aws/middleware/user_agent.go | 112 +- .../aws/aws-sdk-go-v2/aws/retry/middleware.go | 2 +- .../aws/signer/internal/v4/headers.go | 9 +- .../aws/aws-sdk-go-v2/aws/signer/v4/stream.go | 2 +- .../aws/aws-sdk-go-v2/config/CHANGELOG.md | 100 + .../aws-sdk-go-v2/config/auth_scheme_preference.go | 19 + .../github.com/aws/aws-sdk-go-v2/config/config.go | 7 + .../aws/aws-sdk-go-v2/config/env_config.go | 14 + .../aws/aws-sdk-go-v2/config/go_module_metadata.go | 2 +- .../aws/aws-sdk-go-v2/config/load_options.go | 146 + .../aws/aws-sdk-go-v2/config/provider.go | 31 + .../github.com/aws/aws-sdk-go-v2/config/resolve.go | 31 + .../aws-sdk-go-v2/config/resolve_credentials.go | 102 +- .../aws/aws-sdk-go-v2/config/shared_config.go | 16 + .../aws/aws-sdk-go-v2/credentials/CHANGELOG.md | 99 + .../credentials/ec2rolecreds/provider.go | 12 + .../credentials/endpointcreds/provider.go | 14 + .../credentials/go_module_metadata.go | 2 +- .../credentials/processcreds/provider.go | 11 + .../ssocreds/sso_credentials_provider.go | 12 + .../aws-sdk-go-v2/credentials/static_provider.go | 10 + .../credentials/stscreds/assume_role_provider.go | 12 + .../credentials/stscreds/web_identity_provider.go | 12 + .../aws-sdk-go-v2/feature/ec2/imds/CHANGELOG.md | 59 + .../aws-sdk-go-v2/feature/ec2/imds/api_client.go | 8 +- .../feature/ec2/imds/go_module_metadata.go | 2 +- .../internal/configsources/CHANGELOG.md | 55 + .../internal/configsources/go_module_metadata.go | 2 +- .../internal/endpoints/awsrulesfn/partitions.go | 134 +- .../internal/endpoints/awsrulesfn/partitions.json | 80 +- .../internal/endpoints/v2/CHANGELOG.md | 55 + .../internal/endpoints/v2/go_module_metadata.go | 2 +- .../aws/aws-sdk-go-v2/internal/ini/CHANGELOG.md | 4 + .../internal/ini/go_module_metadata.go | 2 +- .../aws/aws-sdk-go-v2/service/ecr/CHANGELOG.md | 378 + .../aws/aws-sdk-go-v2/service/ecr/api_client.go | 734 +- .../ecr/api_op_BatchCheckLayerAvailability.go | 186 +- .../service/ecr/api_op_BatchDeleteImage.go | 189 +- .../service/ecr/api_op_BatchGetImage.go | 188 +- ...i_op_BatchGetRepositoryScanningConfiguration.go | 177 +- .../service/ecr/api_op_CompleteLayerUpload.go | 193 +- .../ecr/api_op_CreatePullThroughCacheRule.go | 238 +- .../service/ecr/api_op_CreateRepository.go | 190 +- .../ecr/api_op_CreateRepositoryCreationTemplate.go | 220 + .../service/ecr/api_op_DeleteLifecyclePolicy.go | 177 +- .../ecr/api_op_DeletePullThroughCacheRule.go | 187 +- .../service/ecr/api_op_DeleteRegistryPolicy.go | 177 +- .../service/ecr/api_op_DeleteRepository.go | 185 +- .../ecr/api_op_DeleteRepositoryCreationTemplate.go | 164 + .../service/ecr/api_op_DeleteRepositoryPolicy.go | 177 +- .../ecr/api_op_DescribeImageReplicationStatus.go | 177 +- .../ecr/api_op_DescribeImageScanFindings.go | 405 +- .../service/ecr/api_op_DescribeImages.go | 213 +- .../ecr/api_op_DescribePullThroughCacheRules.go | 196 +- .../service/ecr/api_op_DescribeRegistry.go | 182 +- .../service/ecr/api_op_DescribeRepositories.go | 203 +- .../api_op_DescribeRepositoryCreationTemplates.go | 293 + .../service/ecr/api_op_GetAccountSetting.go | 165 + .../service/ecr/api_op_GetAuthorizationToken.go | 193 +- .../service/ecr/api_op_GetDownloadUrlForLayer.go | 188 +- .../service/ecr/api_op_GetLifecyclePolicy.go | 177 +- .../ecr/api_op_GetLifecyclePolicyPreview.go | 407 +- .../service/ecr/api_op_GetRegistryPolicy.go | 179 +- .../ecr/api_op_GetRegistryScanningConfiguration.go | 179 +- .../service/ecr/api_op_GetRepositoryPolicy.go | 177 +- .../service/ecr/api_op_InitiateLayerUpload.go | 197 +- .../aws-sdk-go-v2/service/ecr/api_op_ListImages.go | 208 +- .../service/ecr/api_op_ListTagsForResource.go | 177 +- .../service/ecr/api_op_PutAccountSetting.go | 170 + .../aws-sdk-go-v2/service/ecr/api_op_PutImage.go | 192 +- .../ecr/api_op_PutImageScanningConfiguration.go | 182 +- .../service/ecr/api_op_PutImageTagMutability.go | 182 +- .../service/ecr/api_op_PutLifecyclePolicy.go | 182 +- .../service/ecr/api_op_PutRegistryPolicy.go | 197 +- .../ecr/api_op_PutRegistryScanningConfiguration.go | 198 +- .../ecr/api_op_PutReplicationConfiguration.go | 198 +- .../service/ecr/api_op_SetRepositoryPolicy.go | 193 +- .../service/ecr/api_op_StartImageScan.go | 190 +- .../ecr/api_op_StartLifecyclePolicyPreview.go | 177 +- .../service/ecr/api_op_TagResource.go | 177 +- .../service/ecr/api_op_UntagResource.go | 177 +- .../ecr/api_op_UpdatePullThroughCacheRule.go | 191 + .../ecr/api_op_UpdateRepositoryCreationTemplate.go | 209 + .../service/ecr/api_op_UploadLayerPart.go | 196 +- .../ecr/api_op_ValidatePullThroughCacheRule.go | 194 + .../aws/aws-sdk-go-v2/service/ecr/auth.go | 313 + .../aws/aws-sdk-go-v2/service/ecr/deserializers.go | 3914 ++- .../aws/aws-sdk-go-v2/service/ecr/doc.go | 26 +- .../aws/aws-sdk-go-v2/service/ecr/endpoints.go | 272 +- .../aws/aws-sdk-go-v2/service/ecr/generated.json | 19 +- .../service/ecr/go_module_metadata.go | 2 +- .../service/ecr/internal/endpoints/endpoints.go | 466 +- .../aws/aws-sdk-go-v2/service/ecr/options.go | 232 + .../aws/aws-sdk-go-v2/service/ecr/serializers.go | 1041 +- .../aws/aws-sdk-go-v2/service/ecr/types/enums.go | 144 +- .../aws/aws-sdk-go-v2/service/ecr/types/errors.go | 198 +- .../aws/aws-sdk-go-v2/service/ecr/types/types.go | 226 +- .../aws/aws-sdk-go-v2/service/ecr/validators.go | 314 + .../aws-sdk-go-v2/service/ecrpublic/CHANGELOG.md | 311 + .../aws-sdk-go-v2/service/ecrpublic/api_client.go | 732 +- .../api_op_BatchCheckLayerAvailability.go | 185 +- .../service/ecrpublic/api_op_BatchDeleteImage.go | 190 +- .../ecrpublic/api_op_CompleteLayerUpload.go | 193 +- .../service/ecrpublic/api_op_CreateRepository.go | 184 +- .../service/ecrpublic/api_op_DeleteRepository.go | 179 +- .../ecrpublic/api_op_DeleteRepositoryPolicy.go | 177 +- .../service/ecrpublic/api_op_DescribeImageTags.go | 196 +- .../service/ecrpublic/api_op_DescribeImages.go | 206 +- .../service/ecrpublic/api_op_DescribeRegistries.go | 203 +- .../ecrpublic/api_op_DescribeRepositories.go | 203 +- .../ecrpublic/api_op_GetAuthorizationToken.go | 177 +- .../ecrpublic/api_op_GetRegistryCatalogData.go | 177 +- .../ecrpublic/api_op_GetRepositoryCatalogData.go | 177 +- .../ecrpublic/api_op_GetRepositoryPolicy.go | 177 +- .../ecrpublic/api_op_InitiateLayerUpload.go | 196 +- .../ecrpublic/api_op_ListTagsForResource.go | 177 +- .../service/ecrpublic/api_op_PutImage.go | 189 +- .../ecrpublic/api_op_PutRegistryCatalogData.go | 183 +- .../ecrpublic/api_op_PutRepositoryCatalogData.go | 177 +- .../ecrpublic/api_op_SetRepositoryPolicy.go | 192 +- .../service/ecrpublic/api_op_TagResource.go | 177 +- .../service/ecrpublic/api_op_UntagResource.go | 177 +- .../service/ecrpublic/api_op_UploadLayerPart.go | 196 +- .../aws/aws-sdk-go-v2/service/ecrpublic/auth.go | 313 + .../service/ecrpublic/deserializers.go | 501 +- .../aws/aws-sdk-go-v2/service/ecrpublic/doc.go | 20 +- .../aws-sdk-go-v2/service/ecrpublic/endpoints.go | 192 +- .../aws-sdk-go-v2/service/ecrpublic/generated.json | 10 +- .../service/ecrpublic/go_module_metadata.go | 2 +- .../ecrpublic/internal/endpoints/endpoints.go | 34 +- .../aws/aws-sdk-go-v2/service/ecrpublic/options.go | 232 + .../aws-sdk-go-v2/service/ecrpublic/serializers.go | 139 + .../aws-sdk-go-v2/service/ecrpublic/types/enums.go | 20 +- .../service/ecrpublic/types/errors.go | 6 +- .../aws-sdk-go-v2/service/ecrpublic/types/types.go | 95 +- .../service/internal/accept-encoding/CHANGELOG.md | 12 + .../internal/accept-encoding/go_module_metadata.go | 2 +- .../service/internal/presigned-url/CHANGELOG.md | 55 + .../internal/presigned-url/go_module_metadata.go | 2 +- .../aws/aws-sdk-go-v2/service/kms/CHANGELOG.md | 98 + .../aws/aws-sdk-go-v2/service/kms/api_client.go | 127 +- .../service/kms/api_op_CancelKeyDeletion.go | 35 +- .../service/kms/api_op_ConnectCustomKeyStore.go | 46 +- .../service/kms/api_op_CreateAlias.go | 51 +- .../service/kms/api_op_CreateCustomKeyStore.go | 51 +- .../service/kms/api_op_CreateGrant.go | 53 +- .../aws-sdk-go-v2/service/kms/api_op_CreateKey.go | 134 +- .../aws-sdk-go-v2/service/kms/api_op_Decrypt.go | 64 +- .../service/kms/api_op_DeleteAlias.go | 35 +- .../service/kms/api_op_DeleteCustomKeyStore.go | 46 +- .../kms/api_op_DeleteImportedKeyMaterial.go | 54 +- .../service/kms/api_op_DeriveSharedSecret.go | 41 +- .../service/kms/api_op_DescribeCustomKeyStores.go | 43 +- .../service/kms/api_op_DescribeKey.go | 49 +- .../aws-sdk-go-v2/service/kms/api_op_DisableKey.go | 43 +- .../service/kms/api_op_DisableKeyRotation.go | 49 +- .../service/kms/api_op_DisconnectCustomKeyStore.go | 46 +- .../aws-sdk-go-v2/service/kms/api_op_EnableKey.go | 37 +- .../service/kms/api_op_EnableKeyRotation.go | 59 +- .../aws-sdk-go-v2/service/kms/api_op_Encrypt.go | 47 +- .../service/kms/api_op_GenerateDataKey.go | 49 +- .../service/kms/api_op_GenerateDataKeyPair.go | 57 +- .../api_op_GenerateDataKeyPairWithoutPlaintext.go | 57 +- .../kms/api_op_GenerateDataKeyWithoutPlaintext.go | 48 +- .../service/kms/api_op_GenerateMac.go | 41 +- .../service/kms/api_op_GenerateRandom.go | 40 +- .../service/kms/api_op_GetKeyPolicy.go | 35 +- .../service/kms/api_op_GetKeyRotationStatus.go | 62 +- .../service/kms/api_op_GetParametersForImport.go | 46 +- .../service/kms/api_op_GetPublicKey.go | 44 +- .../service/kms/api_op_ImportKeyMaterial.go | 155 +- .../service/kms/api_op_ListAliases.go | 39 +- .../aws-sdk-go-v2/service/kms/api_op_ListGrants.go | 41 +- .../service/kms/api_op_ListKeyPolicies.go | 35 +- .../service/kms/api_op_ListKeyRotations.go | 61 +- .../aws-sdk-go-v2/service/kms/api_op_ListKeys.go | 35 +- .../service/kms/api_op_ListResourceTags.go | 39 +- .../service/kms/api_op_ListRetirableGrants.go | 41 +- .../service/kms/api_op_PutKeyPolicy.go | 52 +- .../aws-sdk-go-v2/service/kms/api_op_ReEncrypt.go | 60 +- .../service/kms/api_op_ReplicateKey.go | 68 +- .../service/kms/api_op_RetireGrant.go | 50 +- .../service/kms/api_op_RevokeGrant.go | 47 +- .../service/kms/api_op_RotateKeyOnDemand.go | 71 +- .../service/kms/api_op_ScheduleKeyDeletion.go | 44 +- .../aws/aws-sdk-go-v2/service/kms/api_op_Sign.go | 77 +- .../service/kms/api_op_TagResource.go | 45 +- .../service/kms/api_op_UntagResource.go | 37 +- .../service/kms/api_op_UpdateAlias.go | 39 +- .../service/kms/api_op_UpdateCustomKeyStore.go | 42 +- .../service/kms/api_op_UpdateKeyDescription.go | 35 +- .../service/kms/api_op_UpdatePrimaryRegion.go | 39 +- .../aws/aws-sdk-go-v2/service/kms/api_op_Verify.go | 67 +- .../aws-sdk-go-v2/service/kms/api_op_VerifyMac.go | 41 +- .../aws/aws-sdk-go-v2/service/kms/auth.go | 28 +- .../aws/aws-sdk-go-v2/service/kms/deserializers.go | 237 +- .../aws/aws-sdk-go-v2/service/kms/doc.go | 28 +- .../aws/aws-sdk-go-v2/service/kms/generated.json | 3 +- .../service/kms/go_module_metadata.go | 2 +- .../service/kms/internal/endpoints/endpoints.go | 102 + .../aws/aws-sdk-go-v2/service/kms/options.go | 7 + .../aws/aws-sdk-go-v2/service/kms/serializers.go | 25 + .../aws/aws-sdk-go-v2/service/kms/types/enums.go | 92 +- .../aws/aws-sdk-go-v2/service/kms/types/errors.go | 9 +- .../aws/aws-sdk-go-v2/service/kms/types/types.go | 93 +- .../aws/aws-sdk-go-v2/service/sso/CHANGELOG.md | 74 + .../aws/aws-sdk-go-v2/service/sso/api_client.go | 127 +- .../service/sso/api_op_GetRoleCredentials.go | 33 + .../service/sso/api_op_ListAccountRoles.go | 33 + .../service/sso/api_op_ListAccounts.go | 33 + .../aws/aws-sdk-go-v2/service/sso/api_op_Logout.go | 33 + .../aws/aws-sdk-go-v2/service/sso/auth.go | 28 +- .../aws/aws-sdk-go-v2/service/sso/deserializers.go | 10 - .../aws/aws-sdk-go-v2/service/sso/generated.json | 3 +- .../service/sso/go_module_metadata.go | 2 +- .../service/sso/internal/endpoints/endpoints.go | 31 + .../aws/aws-sdk-go-v2/service/sso/options.go | 7 + .../aws/aws-sdk-go-v2/service/ssooidc/CHANGELOG.md | 82 + .../aws-sdk-go-v2/service/ssooidc/api_client.go | 127 +- .../service/ssooidc/api_op_CreateToken.go | 33 + .../service/ssooidc/api_op_CreateTokenWithIAM.go | 39 + .../service/ssooidc/api_op_RegisterClient.go | 33 + .../ssooidc/api_op_StartDeviceAuthorization.go | 33 + .../aws/aws-sdk-go-v2/service/ssooidc/auth.go | 28 +- .../aws-sdk-go-v2/service/ssooidc/deserializers.go | 55 +- .../aws-sdk-go-v2/service/ssooidc/generated.json | 3 +- .../service/ssooidc/go_module_metadata.go | 2 +- .../ssooidc/internal/endpoints/endpoints.go | 31 + .../aws/aws-sdk-go-v2/service/ssooidc/options.go | 7 + .../aws-sdk-go-v2/service/ssooidc/types/types.go | 13 + .../aws/aws-sdk-go-v2/service/sts/CHANGELOG.md | 83 + .../aws/aws-sdk-go-v2/service/sts/api_client.go | 127 +- .../aws-sdk-go-v2/service/sts/api_op_AssumeRole.go | 33 + .../service/sts/api_op_AssumeRoleWithSAML.go | 33 + .../sts/api_op_AssumeRoleWithWebIdentity.go | 33 + .../aws-sdk-go-v2/service/sts/api_op_AssumeRoot.go | 33 + .../sts/api_op_DecodeAuthorizationMessage.go | 33 + .../service/sts/api_op_GetAccessKeyInfo.go | 33 + .../service/sts/api_op_GetCallerIdentity.go | 33 + .../service/sts/api_op_GetFederationToken.go | 33 + .../service/sts/api_op_GetSessionToken.go | 33 + .../aws/aws-sdk-go-v2/service/sts/auth.go | 28 +- .../aws/aws-sdk-go-v2/service/sts/deserializers.go | 9 - .../aws/aws-sdk-go-v2/service/st https://github.com/tektoncd/chains/compare/65f8d90df06be35f440f832dd6245e40019709f0..0c9284f740d672930274efbe75033df55dc78515
1 parent 3577a26 commit ea8d3ed

File tree

5,293 files changed

+216773
-473930
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

5,293 files changed

+216773
-473930
lines changed

head

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
0c9284f740d672930274efbe75033df55dc78515
1+
65f8d90df06be35f440f832dd6245e40019709f0

upstream/.github/workflows/codeql.yml

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -40,11 +40,11 @@ jobs:
4040

4141
steps:
4242
- name: Checkout repository
43-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
43+
uses: actions/checkout@v4
4444

4545
# Initializes the CodeQL tools for scanning.
4646
- name: Initialize CodeQL
47-
uses: github/codeql-action/init@a8d1ac45b9a34d11fe398d5503176af0d06b303e # v3.30.7
47+
uses: github/codeql-action/init@v3
4848
with:
4949
languages: ${{ matrix.language }}
5050
# If you wish to specify custom queries, you can do so here or in a config file.
@@ -58,7 +58,7 @@ jobs:
5858
# Autobuild attempts to build any compiled languages (C/C++, C#, Go, or Java).
5959
# If this step fails, then you should remove it and run the build manually (see below)
6060
- name: Autobuild
61-
uses: github/codeql-action/autobuild@a8d1ac45b9a34d11fe398d5503176af0d06b303e # v3.30.7
61+
uses: github/codeql-action/autobuild@v3
6262

6363
# ℹ️ Command-line programs to run using the OS shell.
6464
# 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -71,6 +71,6 @@ jobs:
7171
# ./location_of_script_within_repo/buildscript.sh
7272

7373
- name: Perform CodeQL Analysis
74-
uses: github/codeql-action/analyze@a8d1ac45b9a34d11fe398d5503176af0d06b303e # v3.30.7
74+
uses: github/codeql-action/analyze@v3
7575
with:
7676
category: "/language:${{matrix.language}}"

upstream/.github/workflows/go-coverage.yml

Lines changed: 0 additions & 65 deletions
This file was deleted.

upstream/.github/workflows/kind-e2e.yaml

Lines changed: 11 additions & 15 deletions
Original file line numberDiff line numberDiff line change
@@ -6,10 +6,6 @@ on:
66
- main
77
- release-*
88

9-
concurrency:
10-
group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
11-
cancel-in-progress: true
12-
139
defaults:
1410
run:
1511
shell: bash
@@ -21,26 +17,26 @@ jobs:
2117
fail-fast: false # Keep running if one leg fails.
2218
matrix:
2319
# Keep in sync with the list of supported releases: https://kubernetes.io/releases/
24-
# Add latest k8s-version once it is added in https://github.com/sigstore/scaffolding/releases
20+
# TODO: add 1.31.x once it is added in https://github.com/sigstore/scaffolding/releases
2521
k8s-version:
26-
- v1.31.x
27-
- v1.32.x
28-
- v1.33.x
22+
- v1.28.x
23+
- v1.29.x
24+
- v1.30.x
2925
uses: ./.github/workflows/reusable-e2e.yaml
3026
with:
3127
k8s-version: ${{ matrix.k8s-version }}
32-
pipelines-release: v1.2.0 # Latest version
28+
pipelines-release: v0.50.1
3329
pipelines-lts:
3430
strategy:
3531
fail-fast: false # Keep running if one leg fails.
3632
matrix:
3733
pipelines-release:
38-
# This should follow the list of versions from https://github.com/tektoncd/pipeline/blob/main/releases.md#release
39-
- v0.62.9 # LTS
40-
- v0.65.7 # LTS
41-
- v0.68.1 # LTS
42-
- v1.0.0 # LTS
34+
# This should follow the list of versions from https://github.com/tektoncd/pipeline/blob/main/releases.md#release
35+
- v0.53.5 # LTS
36+
- v0.56.3 # LTS
37+
- v0.59.2 # LTS
38+
- v0.62.0
4339
uses: ./.github/workflows/reusable-e2e.yaml
4440
with:
45-
k8s-version: v1.30.x # intersection of the latest version and scaffolding
41+
k8s-version: v1.28.x
4642
pipelines-release: ${{ matrix.pipelines-release }}

upstream/.github/workflows/lint.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,12 +24,12 @@ jobs:
2424
steps:
2525
- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
2626
with:
27-
go-version: "1.23"
27+
go-version: "1.22"
2828

2929
- uses: actions/checkout@6d193bf28034eafb982f37bd894289fe649468fc # v4.1.7
3030

3131
- name: golangci-lint
32-
uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
32+
uses: golangci/golangci-lint-action@v6.2.0
3333
with:
3434
# Optional: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version
3535
version: latest

upstream/.github/workflows/reusable-e2e.yaml

Lines changed: 18 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -27,29 +27,35 @@ jobs:
2727
GOFLAGS: -ldflags=-s -ldflags=-w
2828
KO_DOCKER_REPO: registry.local:5000/knative
2929
KOCACHE: ~/ko
30-
SIGSTORE_SCAFFOLDING_RELEASE_VERSION: "v0.7.24"
30+
SIGSTORE_SCAFFOLDING_RELEASE_VERSION: "v0.7.12"
3131
TEKTON_PIPELINES_RELEASE: "https://storage.googleapis.com/tekton-releases/pipeline/previous/${{ inputs.pipelines-release }}/release.yaml"
3232
# Note that we do not include the v prefix here so we can use it in all
3333
# the places this is used.
34-
SKIP_INITIALIZE: true
34+
TEKTON_CLI_RELEASE: "0.30.0"
3535

3636
steps:
3737
- name: Set up Go
3838
uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
3939
with:
4040
go-version: 1.22.x
4141

42-
- uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
42+
- uses: ko-build/setup-ko@v0.8
4343
with:
4444
version: tip
4545

46+
- name: Install tkn cli
47+
run: |
48+
curl -Lo ./tkn_${{ env.TEKTON_CLI_RELEASE }}_Linux_x86_64.tar.gz https://github.com/tektoncd/cli/releases/download/v${{ env.TEKTON_CLI_RELEASE }}/tkn_${{ env.TEKTON_CLI_RELEASE }}_Linux_x86_64.tar.gz
49+
tar xvzf ./tkn_${{ env.TEKTON_CLI_RELEASE }}_Linux_x86_64.tar.gz tkn
50+
chmod u+x ./tkn
51+
4652
- name: Check out our repo
4753
uses: actions/checkout@6d193bf28034eafb982f37bd894289fe649468fc # v4.1.7
4854
with:
4955
path: ./src/github.com/tektoncd/chains
5056

5157
- name: Install mirror, kind, knative + sigstore
52-
uses: sigstore/scaffolding/actions/setup@d40cf576f588d980142f0b8462c425d7b32f00b1 # v0.7.25
58+
uses: sigstore/scaffolding/actions/setup@main
5359
with:
5460
k8s-version: ${{ inputs.k8s-version }}
5561
version: ${{ env.SIGSTORE_SCAFFOLDING_RELEASE_VERSION }}
@@ -66,14 +72,12 @@ jobs:
6672
# Restart so picks up the changes.
6773
kubectl -n tekton-pipelines delete po -l app=tekton-pipelines-controller
6874
69-
- name: Run integration tests
75+
- name: Install all the everythings
7076
working-directory: ./src/github.com/tektoncd/chains
77+
timeout-minutes: 10
7178
run: |
72-
./test/presubmit-tests.sh --integration-tests
79+
ko apply -BRf ./config/
7380
74-
75-
- name: Run tutorial taskrun
76-
run: |
7781
kubectl patch configmap/chains-config \
7882
--namespace tekton-chains \
7983
--type merge \
@@ -84,8 +88,10 @@ jobs:
8488
8589
# TODO(vaikas): Better way to find when the chains has picked up
8690
# the changes
87-
sleep 20
91+
sleep 10
8892
93+
- name: Run tutorial taskrun
94+
run: |
8995
kubectl create -f https://raw.githubusercontent.com/tektoncd/chains/main/examples/taskruns/task-output-image.yaml
9096
9197
# Sleep so the taskrun shows up.
@@ -97,7 +103,7 @@ jobs:
97103
echo "Waiting for Chains to do it's thing"
98104
for i in {1..10}
99105
do
100-
tkn tr describe --last -o jsonpath="{.metadata.annotations.chains\.tekton\.dev/transparency}" > tektonentry
106+
./tkn tr describe --last -o jsonpath="{.metadata.annotations.chains\.tekton\.dev/transparency}" > tektonentry
101107
102108
if [ -s ./tektonentry ]; then
103109
if grep --quiet rekor.rekor-system.svc ./tektonentry ; then
@@ -120,7 +126,7 @@ jobs:
120126
121127
- name: Collect diagnostics
122128
if: ${{ failure() }}
123-
uses: chainguard-dev/actions/kind-diag@5363dd9eb48083bbf7674a4bbe62d71c3b230edd # v1.1.2
129+
uses: chainguard-dev/actions/kind-diag@9ba949ac63357c725a9438f3e05a1e33d313498e # main
124130
with:
125131
cluster-resources: nodes
126132
namespace-resources: pods,taskruns,jobs
Lines changed: 76 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,76 @@
1+
name: Test Chains on CRC
2+
on:
3+
push:
4+
branches:
5+
- main
6+
7+
jobs:
8+
build:
9+
name: Run E2E Tests on CRC
10+
runs-on: ubuntu-latest
11+
strategy:
12+
fail-fast: false
13+
matrix:
14+
go:
15+
- '1.22'
16+
env:
17+
SHELL: /bin/bash
18+
KUBECONFIG: '/Users/runner/.kube/config'
19+
20+
steps:
21+
- name: Check out code into the Go module directory
22+
uses: actions/checkout@v4
23+
with:
24+
ref: ${{ github.sha }}
25+
- uses: imjasonh/setup-ko@v0.8
26+
- name: Set up Go
27+
uses: actions/setup-go@v5
28+
with:
29+
go-version: ${{ matrix.go }}
30+
- name: Download and install CRC
31+
run: |
32+
wget "https://developers.redhat.com/content-gateway/file/pub/openshift-v4/clients/crc/2.40.0/crc-linux-amd64.tar.xz"
33+
tar -xf crc-linux-amd64.tar.xz --directory /usr/local/bin --strip-components=1 crc-linux-2.40.0-amd64/crc
34+
- name: Testing CRC
35+
run: |
36+
which crc
37+
crc --help
38+
39+
- name: Install required virtualization software
40+
run: |
41+
sudo apt-get update
42+
sudo apt install qemu-kvm libvirt-daemon libvirt-daemon-system
43+
sudo usermod -a -G libvirt $USER
44+
45+
- name: Install yq
46+
run: |
47+
sudo wget https://github.com/mikefarah/yq/releases/download/v4.31.2/yq_linux_amd64 -O /usr/local/bin/yq
48+
sudo chmod +x /usr/local/bin/yq
49+
yq --version
50+
51+
- name: Set the crc config
52+
env:
53+
PULL_SECRET_CONTENT: ${{ secrets.CRC_TOKEN }}
54+
run: |
55+
crc config set preset microshift
56+
echo "$PULL_SECRET_CONTENT" > pull-secret
57+
crc config set pull-secret-file pull-secret
58+
crc config set network-mode user
59+
crc config set memory 14000
60+
- name: Setup the crc
61+
run: sudo -su $USER crc setup
62+
- name: Start the crc
63+
run: sudo -su $USER crc start
64+
- name: Set Creds
65+
run: |
66+
sudo -su $USER crc oc-env
67+
echo "KUBECONFIG=$HOME/.crc/machines/crc/kubeconfig" >> $GITHUB_ENV
68+
69+
- name: Install Tekton Pipelines and Chains
70+
run: |
71+
# To deploy on Openshift
72+
oc adm policy add-scc-to-user anyuid -z tekton-pipelines-controller
73+
oc adm policy add-scc-to-user anyuid -z tekton-pipelines-webhook
74+
75+
chmod +x test/crc_test.sh
76+
./test/crc_test.sh

upstream/.github/workflows/test-on-microshift.yaml

Lines changed: 0 additions & 69 deletions
This file was deleted.

0 commit comments

Comments
 (0)