* fix: Avoid data races for cacheEntries and index files
Signed-off-by: Casey Buto <cbuto@d2iq.com>
* test: Update to the latest locust version
Signed-off-by: Casey Buto <cbuto@d2iq.com>
* refactor: remove unecessary lock
Signed-off-by: Casey Buto <cbuto@d2iq.com>
* refactor: no need to return error from load function
Signed-off-by: Casey Buto <cbuto@d2iq.com>
* fix: Add additional tenant cache locking
Signed-off-by: Casey Buto <cbuto@d2iq.com>
* Add bom generation script
This commit adds a script in scripts/sbom.sh that generates
the SBOM for the release adding three kinds of elements to it:
1. The source code with full dependencies
2. The tarball distrubutions written in _dist
3. The container image
The SBOM is written into the _dist directory.
Signed-off-by: Adolfo García Veytia (Puerco) <puerco@chainguard.dev>
* Generate SBOM from build workflow
This commit modifies the build pipeline to generate an SPDX SBOM
describing the release. It uses the new bom-installer action to
install the Kubernetes SBOM Tool into the runner and calls the
scripts/sbom.sh script which handles the generation.
Signed-off-by: Adolfo García Veytia (Puerco) <puerco@chainguard.dev>
* Modify release pipeline to properly include SBOM
Signed-off-by: Josh Dolitsky <josh@dolit.ski>
Co-authored-by: Josh Dolitsky <josh@dolit.ski>
- Update version to v0.14.0
- Fix readme for push plugin (in place of #513)
- Upgrade Go modules, Go version in CI
- Use Helm 3.8 in acceptance tests
- Remove bad semever chart tests and testdata
- Support for M1 Macs local dev
- Add SECURITY.md
Signed-off-by: Josh Dolitsky <josh@dolit.ski>
- update to Go 1.15.7
- add release artifacts script (copied from Helm)
- add KEYS file containing maintainer signing keys
- update Makefile to follow Helm release process
- update dependencies (including auth and storage)
- rename masterHandler to rootHandler
- add get-chartmuseum script (based on get-helm-3 script)
- remove unused scripts and make targets for old release process
- modify README with new install instructions and docker image
- rename scripts to use dashes vs underscores
Signed-off-by: Josh Dolitsky <josh@dolit.ski>
One may not have access to all cloud storages at a time. Allow the
testing framework to run even if it is missing a storage.
In the acceptance test and in the testcloud make targets, Storage tests
will only run for the corresponding defined storage variable i.e.:
Amazon tests will run only if TEST_STORAGE_AMAZON_BUCKET is defined and
Google tests will run only if TEST_STORAGE_GOOGLE_BUCKET is defined.
The build machine should catch any test outliers, as it defines
correctly all the cloud test environment variables.
