0
Fork 0
mirror of https://github.com/willnorris/imageproxy.git synced 2024-12-16 21:56:43 -05:00
Commit graph

375 commits

Author SHA1 Message Date
Geras Ghulyan
d94e5610d6 Add support for passing headers to remote server
Add a new passRequestHeaders field to Proxy that identifies headers to
pass from inbound request to remote servers.  Also add associated flag
to imageproxy CLI.

This is initially added to support remote servers that require an
authorization token.

Fixes #321
2021-11-05 08:32:59 -07:00
dependabot[bot]
006b99f6a2 build(deps): bump cloud.google.com/go/storage from 1.16.1 to 1.18.2
Bumps [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) from 1.16.1 to 1.18.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/storage/v1.16.1...storage/v1.18.2)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-10-27 19:03:33 -07:00
dependabot[bot]
49c4bb8ac5 build(deps): bump github.com/aws/aws-sdk-go from 1.40.42 to 1.41.12
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.40.42 to 1.41.12.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.40.42...v1.41.12)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-10-27 13:27:36 -07:00
Will Norris
77e26e44f5 ci: add explicit permissions to codeql config
also remove extra comments that aren't really needed
2021-10-13 09:15:12 -07:00
Will Norris
2174b956f3 docs: point out env var config option for docker 2021-10-13 08:44:00 -07:00
Will Norris
3f2e270fb2 docs: update install instructions for both go and docker 2021-10-12 21:03:22 -07:00
Will Norris
851396b044 actions: switch to publish docker image to github packages
docker integration has gotten too finicky and not worth the trouble
2021-10-12 20:59:49 -07:00
Will Norris
3dd327fafc actions: combine docker workflows 2021-10-12 20:48:18 -07:00
Will Norris
d9b179c9d1 docker: remove envy go.mod file 2021-10-12 20:40:59 -07:00
Will Norris
7aacb8b520 actions: update docker workflow 2021-10-12 20:39:23 -07:00
Will Norris
e5da3b920b bump docker build to go1.17, and actions to latest 2021-10-12 20:30:52 -07:00
Will Norris
66818a786d
change envy package to avoid replace directive 2021-10-12 20:26:12 -07:00
dependabot[bot]
5f85069fde
Bump github.com/aws/aws-sdk-go from 1.38.64 to 1.40.42 (#306)
* Bump github.com/aws/aws-sdk-go from 1.38.64 to 1.40.42

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.38.64 to 1.40.42.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.38.64...v1.40.42)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* bump minimum go version to 1.13

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Will Norris <will@willnorris.com>
2021-09-14 07:59:29 -07:00
dependabot[bot]
bbb026ef38 Bump cloud.google.com/go/storage from 1.15.0 to 1.16.1
Bumps [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) from 1.15.0 to 1.16.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.15.0...storage/v1.16.1)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-09-14 07:39:15 -07:00
Will Norris
09d247ca30 go.mod: update indirect dependencies 2021-06-23 11:40:07 -07:00
Will Norris
95bcf70004
modules: update prometheus and tidy (#294)
also bump minimum go version and limit platform matrix in actions
2021-06-20 15:45:26 -07:00
dependabot[bot]
85f1fd1334 Bump github.com/aws/aws-sdk-go from 1.38.51 to 1.38.64
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.38.51 to 1.38.64.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.38.51...v1.38.64)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-20 13:53:33 -07:00
dependabot[bot]
7cfc99c270 Bump github.com/aws/aws-sdk-go from 1.37.10 to 1.38.51
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.37.10 to 1.38.51.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.37.10...v1.38.51)

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-20 13:42:58 -07:00
dependabot[bot]
4bee838c8e Bump cloud.google.com/go/storage from 1.13.0 to 1.15.0
Bumps [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) from 1.13.0 to 1.15.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.13.0...spanner/v1.15.0)

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-20 13:42:28 -07:00
dependabot[bot]
2d76bb14a2 Bump github.com/fcjr/aia-transport-go from 1.2.1 to 1.2.2
Bumps [github.com/fcjr/aia-transport-go](https://github.com/fcjr/aia-transport-go) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/fcjr/aia-transport-go/releases)
- [Commits](https://github.com/fcjr/aia-transport-go/compare/v1.2.1...v1.2.2)

Signed-off-by: dependabot[bot] <support@github.com>
2021-06-20 13:41:17 -07:00
Will Norris
7ba3f124eb cleanup license headers and contributing docs
- switch to "project authors" style copyright.  Instead of an AUTHORS
  file (https://opensource.google/docs/releasing/authors/), I just list
  Google as a major copyright holder in the README.
- use SPDX style license headers in source files
- remove CLA requirement from contributing docs
2021-03-10 12:24:13 -08:00
dependabot[bot]
3a30ba791e Bump github.com/aws/aws-sdk-go from 1.37.8 to 1.37.10
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.37.8 to 1.37.10.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.37.8...v1.37.10)

Signed-off-by: dependabot[bot] <support@github.com>
2021-02-18 10:42:09 -08:00
Will Norris
b328d1a467 dependabot: back off to monthly 2021-02-18 10:41:17 -08:00
Will Norris
762e5cf299 actions: print go version being used 2021-02-18 09:01:35 -08:00
Will Norris
e307e617d6 bump go version in Dockerfile and tests for go1.16 2021-02-18 08:50:53 -08:00
Will Norris
c34c3dd593 readme: add statement about supported go versions 2021-02-11 15:01:55 -08:00
Will Norris
87f0c62a3e actions: bump to actions/cache@v2 2021-02-11 14:45:05 -08:00
Will Norris
bb65766878 actions: only update test coverage on recent go version 2021-02-11 14:45:05 -08:00
Will Norris
f41a60b471 actions: update which go versions we test with
bump to 1.x and 1.14.x, the two most recent major go versions.  Also add
go1.11 on linux, which should still work, but is not actually supported.
2021-02-11 14:45:05 -08:00
Will Norris
e72ae6fde5 go get -u ./... 2021-02-11 08:50:07 -08:00
Will Norris
3999c5bd80 run goimports 2021-01-24 13:44:39 -08:00
Alexandre Testu
5bb32547c9 updated heroku instructons / added eb instructions 2021-01-24 12:32:17 -08:00
Yassine ABOUKIR
2203979b9c Add X-XSS-Protection HTTP response header to block potential XSS 2021-01-24 12:18:42 -08:00
Will Norris
dd798db002
dependabot: move to weekly updates 2021-01-20 11:43:59 -08:00
dependabot[bot]
2d534353f5 Bump github.com/prometheus/client_golang from 1.7.1 to 1.9.0
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.7.1 to 1.9.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.7.1...v1.9.0)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-13 16:49:01 -08:00
dependabot[bot]
c2e0ac1208 Bump github.com/aws/aws-sdk-go from 1.34.20 to 1.36.26
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.34.20 to 1.36.26.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/master/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.34.20...v1.36.26)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-13 16:31:23 -08:00
dependabot[bot]
2afbc71f37 Bump cloud.google.com/go/storage from 1.11.0 to 1.12.0
Bumps [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) from 1.11.0 to 1.12.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/master/CHANGES.md)
- [Commits](https://github.com/googleapis/google-cloud-go/compare/spanner/v1.11.0...spanner/v1.12.0)

Signed-off-by: dependabot[bot] <support@github.com>
2021-01-13 13:12:07 -08:00
dependabot-preview[bot]
7c98d50e98 Create Dependabot config file 2021-01-13 10:37:49 -08:00
Will Norris
31e8faa098 codecov token not required for public repos 2021-01-13 09:10:47 -08:00
Blake Stoddard
c08b3c505a Disable browser MIME confusion attacks via content-type sniffing 2020-10-16 07:11:59 -07:00
Blake Stoddard
c6206ea30c Set a strict Content-Security-Policy 2020-10-16 07:11:59 -07:00
Will Norris
66c549e07b
Setup GitHub Action for code scanning (#247) 2020-09-16 12:39:41 -07:00
Blake Stoddard
fd43ff2198
Support proxying images with no provided intermediate cert (#241)
Replace http.DefaultTransport with aia-transport-go to properly handle missing intermediate certs
2020-09-10 01:52:43 -07:00
Blake Stoddard
52f4360543
Add option to disable following redirects (#237)
When redirects are followed, ensure that they are still allowed per AllowHosts/DenyHosts
2020-09-10 01:40:59 -07:00
Will Norris
32a8bea35f switch to supported version of redigo package
fixes #244
2020-09-10 00:53:51 -07:00
Will Norris
6126c92bb5 cleanup unused module entries 2020-09-10 00:53:01 -07:00
Will Norris
067500cd7d add more golangci-lint checks 2020-09-10 00:30:25 -07:00
Will Norris
80c7cb29a6 remove unecessary gitignore 2020-09-09 23:41:53 -07:00
Will Norris
84ae42bcde golangci: enable additional checks 2020-09-09 23:28:59 -07:00
Will Norris
7e21abe7d1 remove ineffective break statement 2020-09-09 22:44:48 -07:00