6 Commits

Author	SHA1	Message	Date
Roman Khavronenko	d071e39694	bump Go version to 1.19.1 (#3108) ... The reason is to cover vulnerability GO-2022-0969 Found in: net/http@go1.18.5 Fixed in: net/http@go1.19.1 More info: https://pkg.go.dev/vuln/GO-2022-0969 Signed-off-by: hagen1778 <roman@victoriametrics.com> Signed-off-by: hagen1778 <roman@victoriametrics.com>	2022-09-14 13:43:27 +03:00
Aliaksandr Valialkin	221dd3a224	all: bump the minimum supported version of Go from 1.17 to 1.18 ... This is needed because some dependencies uses generics, which have been appeared in Go1.18 This is a follow-up for caf3dd4fa2	2022-08-08 13:45:39 +03:00
naveensrinivasan	21f80fa137	chore: Set permissions for GitHub actions ... Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much. - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs [Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/) Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>	2022-04-19 11:33:48 +03:00
Roman Khavronenko	8b67168609	ci: bump go version to 1.17 (#1895) ... The bump was required for `vmalert` package. `vmalert` docs now also contain an updated description. Signed-off-by: hagen1778 <roman@victoriametrics.com>	2021-12-02 14:51:45 +02:00
Aliaksandr Valialkin	36a79b7fd3	Add make check-licenses rule for the ability to manually check licenses in vendored dependencies ... This is a follow-up for c687536956	2021-05-10 12:01:37 +03:00
Artem Navoiev	632eb82dbd	Add vendor license checker, update codecov action, add dependbot for … (#1280) ... * Add vendor license checker, update codecov action, add dependbot for github actions * update gitingore, temprorary turn on check * fix action name * change action rules to trigger only when vendor changes * remove obsolete line from main action	2021-05-10 12:01:20 +03:00