Infrastructure/zot
0
Fork 0
mirror of https://github.com/project-zot/zot.git synced 2024-12-16 21:56:37 -05:00
Code Issues Activity
1226 commits 7 branches 108 tags 208 MiB
Commit graph

246 commits

Author SHA1 Message Date
Andrei Aaron
ec38d39c06
chore(go.mod): fix dependabot alerts (#2247) 
Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
 2024-02-14 09:12:57 -08:00
Andrei Aaron
60dc8569ec
build(go): switch to go 1.21 (#2049) 
Also update to the latest swaggo version, as the previous one did not work with go 1.21

Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
 2024-02-07 10:54:28 -08:00
Andrei Aaron
e3065f6a2c
chore(deps): fix dependabot alerts (#2232) 
Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
 2024-02-05 09:56:38 -08:00
Ramkumar Chinchani
580df421bf
chore: fix dependabot alerts (#2208) 
https://github.com/project-zot/zot/pull/2192
https://github.com/project-zot/zot/pull/2193
https://github.com/project-zot/zot/pull/2194
https://github.com/project-zot/zot/pull/2195
https://github.com/project-zot/zot/pull/2196
https://github.com/project-zot/zot/pull/2197
https://github.com/project-zot/zot/pull/2198
https://github.com/project-zot/zot/pull/2199
https://github.com/project-zot/zot/pull/2200
https://github.com/project-zot/zot/pull/2201
https://github.com/project-zot/zot/pull/2202
https://github.com/project-zot/zot/pull/2203
https://github.com/project-zot/zot/pull/2204
https://github.com/project-zot/zot/pull/2205
https://github.com/project-zot/zot/pull/2206
https://github.com/project-zot/zot/pull/2207

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2024-01-29 15:30:41 -08:00
Ramkumar Chinchani
9def35f3b8
chore: update go.mod to fix dependabot alerts (#2181) 
https://github.com/project-zot/zot/pull/2178

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2024-01-25 14:40:26 -08:00
peusebiu
ee9bbb0bf2
feat(log): print traceback when panics occur (#2166) 
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2024-01-16 09:08:14 -08:00
Ramkumar Chinchani
d617c41cb7
chore: fix dependabot alerts (#2160) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2024-01-10 15:56:32 -08:00
Ramkumar Chinchani
c2196e3ae1
Fix deps (#2139) 
* chore: fix dependabot alerts

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>

* fix: update ui version

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>

---------

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-12-16 10:05:25 +02:00
Ramkumar Chinchani
44dfa8a210
chore: fix dependabot alerts (#2133) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-12-12 12:44:28 +02:00
Ramkumar Chinchani
8bac653dd2
chore: fix dependabot alerts (#2113) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-12-04 11:28:01 -08:00
Ramkumar Chinchani
c62ca62141
chore: fix dependabot alerts (#2097) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-11-30 11:46:14 -08:00
Ramkumar Chinchani
c7bd2a67b4
chore: fix dependabot alerts (#2066) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-11-20 14:55:04 -08:00
Ramkumar Chinchani
06e7b0b579
chore: fix dependabot alerts (#2040) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-11-15 16:02:32 +02:00
Ramkumar Chinchani
8609900406
chore: fix dependabot alerts (#2028) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-11-13 10:48:20 +02:00
Ramkumar Chinchani
3ddfd655ea
chore: fix dependabot alerts (#2019) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-11-09 09:30:16 -08:00
Ramkumar Chinchani
3e6053e1db
chore: fix dependabot alerts (#1986) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-10-30 14:47:11 -07:00
Ramkumar Chinchani
a3d8202345
chore: fix dependabot alerts (#1961) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-10-24 12:17:59 +03:00
Ramkumar Chinchani
d60786c3b2
chore: fix dependabot alerts (#1942) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-10-16 15:19:26 -07:00
Ramkumar Chinchani
556c0660bd
chore: fix dependabot alerts (#1915) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-10-11 14:29:59 +03:00
Andrei Aaron
ee25985c3e
chore(modules): update trivy to the tip of main (#1901) 
Includes ce89d08345

Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
 2023-10-09 15:12:25 -07:00
Ramkumar Chinchani
ed775914df
chore: fix dependabot alerts (#1911) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-10-09 11:35:42 -07:00
Ramkumar Chinchani
e6902b937f
chore: fix dependabot alerts (#1893) 2023-10-05 09:26:20 +03:00
Ramkumar Chinchani
0fb23848b4
chore: fix dependabot alerts (#1885) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-10-04 12:29:31 -07:00
Andreea Lupu
92e382ce39
refactor(scrub): replace umoci logic in scrub implementation (#1845) 
- implement scrub also for S3 storage by replacing umoci
- change scrub implementation for ImageIndex
- take the `Subject` into consideration when running scrub
- remove test code relying on the umoci library. Since we started
relying on images in test/data, and we create our own images using
go code we can obtain digests by other means. (cherry picked from commit 489d4e2d23c1b4e48799283f8281024bbef6123f)

Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com>
 2023-09-26 11:02:11 -07:00
Ramkumar Chinchani
9096031aeb
chore: fix dependabot alerts (#1855) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-09-25 23:03:13 +03:00
Ramkumar Chinchani
f8002c7dd3
chore: fix dependabot alerts (#1827) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-09-18 11:34:57 -07:00
Ramkumar Chinchani
6461b661f1
chore: fix dependabot alerts (#1797) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-09-11 20:21:56 -07:00
Ramkumar Chinchani
9fcb8a8489
chore: fix dependabot alerts (#1774) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-09-08 22:31:08 +03:00
Andreea Lupu
5a3fac40db
feat: upload cosign public key and notation certificates to cloud (#1744) 
- using secrets manager for storing public keys and certificates
- adding a default truststore for notation verification and upload all certificates to this default truststore
- removig `truststoreName` query param from notation api for uploading certificates


(cherry picked from commit eafcc1a213)

Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com>
 2023-09-08 10:03:58 +03:00
Alexei Dodon
f5b63963be
refactor: Reduce binary size of zot-minimal; Added CI check for binary size (#1758) 
Signed-off-by: Alexei Dodon <adodon@cisco.com>
 2023-09-06 19:58:00 +03:00
Ramkumar Chinchani
75a76005b4
chore: fix dependabot alerts (#1763) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-09-05 22:30:49 +03:00
peusebiu
b80deb9927
refactor(storage): refactor storage into a single ImageStore (#1656) 
unified both local and s3 ImageStore logic into a single ImageStore
added a new driver interface for common file/dirs manipulations
to be implemented by different storage types

refactor(gc): drop umoci dependency, implemented internal gc

added retentionDelay config option that specifies
the garbage collect delay for images without tags

this will also clean manifests which are part of an index image
(multiarch) that no longer exist.

fix(dedupe): skip blobs under .sync/ directory

if startup dedupe is running while also syncing is running
ignore blobs under sync's temporary storage

fix(storage): do not allow image indexes modifications

when deleting a manifest verify that it is not part of a multiarch image
and throw a MethodNotAllowed error to the client if it is.
we don't want to modify multiarch images

Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2023-09-01 10:54:39 -07:00
Andrei Aaron
521b109c8c
chore(go.mod): upgrade 3rd party packages (#1742) 
Special note for oras.land/oras-go:
- 1.2.4 is not released yet, but tip of their v1 branch is compatible with docker v24.0.2
- 1.2.3 is not compatible with docker v24.0.2
Other 3rd party software depend on both oras-go v1 and docker v24

See also https://github.com/oras-project/oras-go/pull/527

Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
 2023-08-31 20:40:19 +03:00
Ramkumar Chinchani
9bccd784a9
chore: fix dependabot alerts (#1737) 2023-08-30 07:53:03 +03:00
Ramkumar Chinchani
6d65401499
chore: fix dependabot alerts (#1720) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-08-22 14:43:34 +03:00
Ramkumar Chinchani
e129d4003b
chore: fix dependabot alerts (#1702) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-08-15 10:15:50 +03:00
Ramkumar Chinchani
04627534a9
chore(go.mod): fix dependabot alerts (#1684) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-08-10 09:49:55 +03:00
Ramkumar Chinchani
75b94a3c8b
chore: fix dependabot alerts (#1649) 2023-07-25 08:14:37 +03:00
Andrei Aaron
04fccd11fd
chore(go.mod): upgrade trivy, cosign and remove replace directive (#1635) 
Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
 2023-07-18 14:18:31 -07:00
Ramkumar Chinchani
fe9c9750b5
chore: fix dependabot alerts (#1631) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-07-17 23:37:54 +03:00
Ramkumar Chinchani
6cd4455da1
chore: fix dependabot alerts (#1621) 
* chore: fix dependabot alerts

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>

* test: fix the validation for digests

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>

---------

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-07-15 12:56:09 +03:00
peusebiu
d3f27b4ba6
feat: add additional manifest validations (#1609) 
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2023-07-13 09:31:39 -07:00
Ramkumar Chinchani
730ef4aada
chore: fix dependabot alerts (#1613) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-07-13 10:14:03 +03:00
peusebiu
17d1338af1
feat: integrate openID auth logic and user profile management (#1381) 
This change introduces OpenID authn by using providers such as Github,
Gitlab, Google and Dex.
User sessions are now used for web clients to identify
and persist an authenticated users session, thus not requiring every request to
use credentials.
Another change is apikey feature, users can create/revoke their api keys and use them
to authenticate when using cli clients such as skopeo.

eg:
login:
/auth/login?provider=github
/auth/login?provider=gitlab
and so on

logout:
/auth/logout

redirectURL:
/auth/callback/github
/auth/callback/gitlab
and so on

If network policy doesn't allow inbound connections, this callback wont work!

for more info read documentation added in this commit.

Signed-off-by: Alex Stan <alexandrustan96@yahoo.ro>
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
Co-authored-by: Alex Stan <alexandrustan96@yahoo.ro>
 2023-07-07 09:27:10 -07:00
LaurentiuNiculae
96d9d318df
feat(referrers): added index support for referrers queries (#1560) 
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com>
 2023-07-05 09:42:16 -07:00
Ramkumar Chinchani
137e5bd793
chore: fix dependabot alerts (#1581) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-07-05 11:42:24 +03:00
Ramkumar Chinchani
aad6db279b
chore: fix dependabot alerts (#1576) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-07-04 09:19:26 -07:00
Ramkumar Chinchani
d30d7a9330
chore: fix dependabot alerts (#1537) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-06-19 12:34:50 -07:00
Ramkumar Chinchani
7dd17be96d
chore: fix dependabot alerts (#1517) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-06-16 10:28:43 +03:00
peusebiu
03f47f68c0
chore(deps): downgrade golang-lru (#1515) 
Signed-off-by: Petu Eusebiu <peusebiu@cisco.com>
 2023-06-14 19:45:30 +03:00
Ramkumar Chinchani
d7bddd2a05
chore: fix dependabot alerts (#1508) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-06-12 14:53:03 -07:00
Lisca Ana-Roberta
622dde9193
fix: referrers now appears in swagger generated docs (#1488) 
Signed-off-by: Lisca Ana-Roberta <ana.kagome@yahoo.com>
 2023-06-12 10:32:11 -07:00
Ramkumar Chinchani
4d6ca493f2
chore: fix dependabot alerts (#1501) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-06-09 10:27:42 -07:00
Andrei Aaron
96d00cd0ef
fix(cve): Fix CVE scanning in images containing Jar files (#1475) 2023-06-01 00:37:46 +03:00
Ramkumar Chinchani
40180f878f
chore(go.mod): fix dependabot alerts (#1491) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-05-31 22:16:21 +03:00
Ramkumar Chinchani
e148343540
chore(go.mod): fix dependabot alerts (#1479) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-05-27 01:23:50 +03:00
LaurentiuNiculae
6e6ffe800c
chore(go.mod): upgrade to notation-go v1.0.0-rc.5 and image-spec v1.1.0-rc3 (#1468) 
Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com>
 2023-05-23 15:16:33 +00:00
Ramkumar Chinchani
83ae1aad70
chore(go.mod): fix dependabot alerts (#1466) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-05-23 10:14:43 +03:00
Ramkumar Chinchani
2be5459c8e
chore: fix dependabot alerts (#1458) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-05-17 00:37:34 -07:00
Ramkumar Chinchani
d17fe0044b
chore(go.mod): fix dependabot alerts (#1443) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-05-12 09:45:52 +03:00
Ramkumar Chinchani
9534e0b88b
chore: fix dependabot alerts (#1409) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-05-11 16:39:21 -07:00
LaurentiuNiculae
ea79be64da
refactor(artifact): remove oci artifact support (#1359) 
* refactor(artifact): remove oci artifact support
- add header to referrers call to indicated applied artifact type filters

Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com>

* feat(gc): simplify gc logic to increase coverage

Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com>

---------

Signed-off-by: Laurentiu Niculae <niculae.laurentiu1@gmail.com>
 2023-05-10 10:15:33 -07:00
Ramkumar Chinchani
42df4c505a
chore: fix dependabot alerts (#1403) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-05-01 12:49:10 -07:00
Ramkumar Chinchani
c3ba122830
chore(go.mod): fix dependabot alerts (#1377) 2023-05-01 08:31:02 +03:00
Andreea Lupu
40bf76add5
chore(go.mod): upgrade trivy and cosign (#1387) 
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com>
 2023-04-27 09:35:10 -07:00
Ramkumar Chinchani
e6b81bb354
chore(go.mod): fix dependabot alerts (#1365) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-04-12 14:10:47 +03:00
Ramkumar Chinchani
9f512082ad
chore(go.mod): fix dependabot alerts (#1360) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-04-11 23:21:30 -07:00
Ramkumar Chinchani
8f809bda29
chore(go.mod): fix dependabot alerts (#1351) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-04-10 14:09:54 -07:00
Ramkumar Chinchani
38997be596
chore(go.mod): fix dependabot alerts (#1343) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-04-07 09:35:12 +03:00
Andrei Aaron
06bd8a8252
chore(go.mod): fix dependabot alerts (#1333) 
upgrade to github.com/aws/aws-sdk-go@v1.44.237
upgrade to github.com/aquasecurity/trivy@v0.38.3
upgrade to oras.land/oras-go@v1.2.3
upgrade to github.com/google/go-containerregistry@v0.14.0
upgrade to github.com/moby/buildkit@v0.11.4

Note we can't switch to trivy 0.39.0 as well as some other updates
because they would also require upgrade of cosign to v2 with
breaking api changes

Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
 2023-04-06 01:00:12 -07:00
Ramkumar Chinchani
d9173e3ad3
chore(go.mod): fix dependabot alerts (#1330) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-04-05 09:39:15 +03:00
Ramkumar Chinchani
5ad25126b7
chore: fix dependabot alerts (#1320) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-03-29 13:13:16 -07:00
Ramkumar Chinchani
917159143c
chore: fix dependabot alerts (#1312) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-03-27 12:16:29 -07:00
Ramkumar Chinchani
e54c36db12
chore(go.mod): fix dependabot alerts (#1305) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-03-25 22:43:36 +02:00
Ramkumar Chinchani
906f8ce621
chore(deps): fix dependabot alerts (#1291) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-03-22 12:33:21 -07:00
Ramkumar Chinchani
c2bec0d4a8
chore(go.mod): fix dependabot alerts (#1251) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-03-07 09:59:59 +02:00
Andrei Aaron
73b1126bbf
chore(go.mod): fix dependabot alerts (#1247) 
Supersedes:
- https://github.com/project-zot/zot/pull/1132
- https://github.com/project-zot/zot/pull/1243
- https://github.com/project-zot/zot/pull/1244
- https://github.com/project-zot/zot/pull/1245

Also update the AWS SDK libraries used

Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
 2023-03-06 11:05:19 -08:00
Andreea Lupu
646250736e
fix(go.mod): replace opencontainers/umoci dependency with project-stacker/umoci (#1240) 
Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com>
 2023-03-05 21:11:07 -08:00
Ramkumar Chinchani
5a2fb4108d
chore(go.mod): fix dependabot alerts (#1228) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-02-28 17:38:49 +02:00
Ramkumar Chinchani
f6a540747f
chore(go.mod): fix dependabot alerts (#1222) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-02-23 22:32:20 +02:00
Ramkumar Chinchani
4a56e30cd7
chore(go.mod): fix dependabot alerts (#1218) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-02-23 09:09:28 +02:00
Ramkumar Chinchani
be33f7b252
chore(go.mod): fix dependabot alerts (#1210) 
* chore(go.mod): fix dependabot alerts

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>

* chore(test): update image tags

We have cleaned up older golang images in the project.

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>

* ci(gqlgen): fix gql schema validation GH workflow after npm upgrade

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>

---------

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-02-17 13:54:49 -08:00
Ramkumar Chinchani
b9a75b2e44
chore(go.mod): fix dependabot alerts (#1194) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-02-13 12:48:05 -08:00
Andreea Lupu
ee95ab0ffc
fix: call notation-go libs instead of using notation binary (#1104) 
fix: add loading notation path

Signed-off-by: Andreea-Lupu <andreealupu1470@yahoo.com>
Co-authored-by: Roxana Nemulescu <roxana.nemulescu@gmail.com>
 2023-02-13 10:43:52 -08:00
Ramkumar Chinchani
c154ab02f3
chore(deps): fix dependabot alerts (#1179) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-02-07 08:52:17 +02:00
Ramkumar Chinchani
863d057e43
chore(deps): fix dependabot alerts (#1153) 
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-02-01 00:21:14 -08:00
Lisca Ana-Roberta
976ccfcf0d
fix: removed references to old dist-spec (#1128) 
Signed-off-by: Ana-Roberta Lisca <ana.kagome@yahoo.com>
 2023-01-31 09:35:33 -08:00
Ramkumar Chinchani
b3ed92ef1a
chore(deps): fix dependabot alerts (#1143) 
https://github.com/project-zot/zot/pull/1119
https://github.com/project-zot/zot/pull/1142

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-01-26 22:39:18 -08:00
Ramkumar Chinchani
0938e4704c
chore(deps): fix dependabot alerts (#1131) 
Also, remove go mod redirects and update linter config.

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-01-25 10:58:39 -08:00
Andrei Aaron
fac1d1d05d
chore(trivy): update trivy version and enforce OCI compliant repo names in local image storage (#1068) 
1. chore(trivy): update trivy library version

The trivy team switched github.com/urfave/cli for viper so
there are some other code changes as well.

Since we don't use github.com/urfave/cli directly in our software
we needed to add a tools.go in order for "go mod tidy" to not delete it.
See this pattern explained in:
- https://github.com/99designs/gqlgen#quick-start
- https://github.com/golang/go/wiki/Modules#how-can-i-track-tool-dependencies-for-a-module
- https://github.com/go-modules-by-example/index/blob/master/010_tools/README.md#walk-through

The jobs using "go get -u" have been updated to use "go install", since go get
modifies the go.mod by upgrading some of the packages, but downgrading trivy to an older
version with broken dependencies

2. fix(storage) Update local storage to ignore folder names not compliant with dist spec
Also updated trivy to download the DB and cache results under the rootDir/_trivy folder

3. fix(s3): one of the s3 tests was missing the skipIt call
This caused a failure when running locally without s3 being available

4. make sure the offline scanning is enabled, and zot only downloads the trivy DB
on the regular schedule, and doesn't download the DB on every image scan

ci: increase build and test timeout as tests are reaching the limit more often

Signed-off-by: Andrei Aaron <aaaron@luxoft.com>
 2023-01-18 08:24:44 -08:00
Ramkumar Chinchani
eebc750367
chore(deps): fix dependabot alerts (#1115) 
https://github.com/project-zot/zot/pull/1112
https://github.com/project-zot/zot/pull/1113
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-01-17 09:48:58 +02:00
Ramkumar Chinchani
6ab27fcdcd
chore(deps): fix dependabot alerts (#1098) 
https://github.com/project-zot/zot/pull/1094
https://github.com/project-zot/zot/pull/1095
https://github.com/project-zot/zot/pull/1096
https://github.com/project-zot/zot/pull/1097

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2023-01-10 16:17:19 -08:00
Ramkumar Chinchani
08a8b3d44c
chore(deps): fix dependabot alerts (#1090) 
https://github.com/project-zot/zot/pull/1087
https://github.com/project-zot/zot/pull/1088
https://github.com/project-zot/zot/pull/1089
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-12-29 10:05:22 +02:00
Ramkumar Chinchani
271ffb53cc
chore(deps): fix dependabot alerts (#1080) 
https://github.com/project-zot/zot/pull/1079
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-12-20 15:29:21 -08:00
Ramkumar Chinchani
1c9db99b0d
chore(deps): fix dependabot alerts (#1077) 
https://github.com/project-zot/zot/pull/1071
https://github.com/project-zot/zot/pull/1075
https://github.com/project-zot/zot/pull/1076


Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-12-20 11:59:04 -08:00
Ramkumar Chinchani
2571e8e5fc
chore(deps): fix dependabot alerts (#1074) 
https://github.com/project-zot/zot/pull/1069
https://github.com/project-zot/zot/pull/1070
https://github.com/project-zot/zot/pull/1071
https://github.com/project-zot/zot/pull/1072
https://github.com/project-zot/zot/pull/1073


Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-12-19 14:59:31 -08:00
Ramkumar Chinchani
2efa80d1ec
chore(deps): fix dependabot alerts (#1060) 
https://github.com/project-zot/zot/pull/1057
https://github.com/project-zot/zot/pull/1058
https://github.com/project-zot/zot/pull/1059
Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-12-12 14:09:34 -08:00
Ramkumar Chinchani
d78f1d962f
chore(deps): fix dependabot alerts (#1048) 
https://github.com/project-zot/zot/pull/1043
https://github.com/project-zot/zot/pull/1044
https://github.com/project-zot/zot/pull/1045
https://github.com/project-zot/zot/pull/1046
https://github.com/project-zot/zot/pull/1047

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-12-06 09:09:03 -08:00
Ramkumar Chinchani
ffa223de43
chore(deps): fix dependabot alerts (#1030) 
https://github.com/project-zot/zot/pull/1024
https://github.com/project-zot/zot/pull/1025
https://github.com/project-zot/zot/pull/1026
https://github.com/project-zot/zot/pull/1027
https://github.com/project-zot/zot/pull/1028

Signed-off-by: Ramkumar Chinchani <rchincha@cisco.com>
 2022-11-29 16:41:01 +02:00
Catalin-George Hofnar
31b9481713
feat(cache): dynamodb implementation (#953) 
Signed-off-by: Catalin Hofnar <catalin.hofnar@gmail.com>
 2022-11-22 10:29:57 -08:00