My assumption is that this used to be in place because of `go` not
ignoring the `vendor` directory.
However, in 2023 this appears to no longer be an issue, and only
adds complexity. While running `go test ./...` works just fine.
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
This allows you to run the release locally, without publishing or
signing, against the current state of the repository.
There are some more improvements I would like to make to the
`Makefile` e.g., the deprecation of `golint` and the introduction of a
`help` target. But they are out of scope for the current things I am
working on.
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
These are no longer required, as they are now handled by GoReleaser
or no longer under our control (`make_download_page.sh`).
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
This adds the base for releasing using GoReleaser going forward in a
backwards compatible manner, which means:
- Publishing of artifacts in the same formats as previous releases
- Publishing of RPM and deb artifacts in the same formats as previous
releases (although the metadata may need a bit of tweaking)
In addition, it includes:
- SBOM inclusion per binary artifact
It still needs work around:
- Artifact signing
- SLSA compliance
- Docker images
- GitHub release
- Changelog generation
- GitHub Action workflow
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
This commit renames the Go module from `go.mozilla.org/sops/v3` to
`github.com/getsops/sops/v3` without a major version bump, to align
with new stewardship.
For more information around this change, refer to
https://github.com/getsops/sops/issues/1246.
For a one-liner to change the `go.mod` and any import paths in your
Go project making use of this module, run:
```
find /path/to/repo -type f \( -name "*.go" -o -name "go.mod" \) -exec sed -i 's|go.mozilla.org/sops/v3|github.com/getsops/sops/v3|g' {} \;
find /path/to/repo -type f \( -name "*.go" -o -name "go.mod" \) -exec sed -i '' 's|go.mozilla.org/sops/v3|github.com/getsops/sops/v3|g' {} \;
```
Signed-off-by: Hidde Beydals <hidde@hhh.computer>
This was only required for the test mocks for the V1 AWS SDK tests,
which have been removed with the rewrite to V2.
Signed-off-by: Hidde Beydals <hello@hidde.co>
* Remove ulfr and autrilla as core maintainers
* Update badges, we no longer us travis-ci
* Remove python docs, especially as it has not been maintained for years
* Fix dev install instructions
* Remove vendor directory from repo
With #498 being merged and making the switch to Go modules, there does
not seem to be a need to store this directory within the repo anymore.
As well, it will make reviewing dependency updates and viewing the
PR's within Github's UI much more manageable.
This PR also include adding `vendor/` to `.gitignore` and changing the
Makefile so that `make test` will run `make vendor` first.
* Switch to using make install in Dockerfile
* Remove -mod vendor flag from install and functional-tests
* Use proxy.golang.org for go modules within Makefile
**IMPORTANT** This breaks compatibility of the file format in 1.x for
json files, due to the version being encoded as a number in json files.
The fix for this is easy, however. One can either use a previous version
of sops in the range [2.0.0, 2.0.9] to edit the file, or one can manually edit
the encrypted file and change the version from a number to a string
Previously we basically hand-converted the metadata struct into a map
which we then passed to the stores. Now, we convert the metadata struct
to a "serialization" struct, which the stores serialize
