[PR #24] [MERGED] ci: change to ko and goreleaser, add SLSA3 verification, fix security issues #33

New issue

Closed

opened 2026-03-03 16:27:52 +03:00 by kerem · 0 comments

kerem commented

2026-03-03 16:27:52 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/natrontech/pbs-exporter/pull/24
Author: @janfuhrer
Created: 6/19/2024
Status: ✅ Merged
Merged: 6/19/2024
Merged by: @janfuhrer

Base: main ← Head: ci/update-workflows

📝 Commits (2)

cc8d0f6 ci: change to ko and goreleaser, add SLSA3 verification
bed1906 security: fix security alerts of gosec

📊 Changes

31 files changed (+1215 additions, -205 deletions)

View changed files

➕ .github/ISSUE_TEMPLATE/bug_report.md (+23 -0)
➕ .github/ISSUE_TEMPLATE/feature_request.md (+20 -0)
➕ .github/PULL_REQUEST_TEMPLATE.md (+16 -0)
➕ .github/publish-image/action.yaml (+92 -0)
➕ .github/workflows/README.md (+90 -0)
➖ .github/workflows/ci.yml (+0 -39)
📝 .github/workflows/codeql.yml (+28 -45)
➕ .github/workflows/dependency-review.yml (+31 -0)
➖ .github/workflows/docker-release.yml (+0 -41)
➕ .github/workflows/golangci-lint.yml (+30 -0)
➕ .github/workflows/gosec.yml (+30 -0)
➕ .github/workflows/osv-scan.yml (+23 -0)
➕ .github/workflows/release.yml (+216 -0)
➕ .github/workflows/scorecard.yml (+63 -0)
📝 .gitignore (+1 -0)
➕ .goreleaser.yml (+80 -0)
➕ .ko.yaml (+14 -0)
📝 .pre-commit-config.yaml (+7 -1)
➕ CHANGELOG.md (+5 -0)
📝 CODE_OF_CONDUCT.md (+13 -9)

...and 11 more files

📄 Description

closes #21

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/natrontech/pbs-exporter/pull/24 **Author:** [@janfuhrer](https://github.com/janfuhrer) **Created:** 6/19/2024 **Status:** ✅ Merged **Merged:** 6/19/2024 **Merged by:** [@janfuhrer](https://github.com/janfuhrer) **Base:** `main` ← **Head:** `ci/update-workflows` --- ### 📝 Commits (2) - [`cc8d0f6`](https://github.com/natrontech/pbs-exporter/commit/cc8d0f65caaa010d47590794d44eb39fe5345c71) ci: change to ko and goreleaser, add SLSA3 verification - [`bed1906`](https://github.com/natrontech/pbs-exporter/commit/bed19064c1a29f03f9d25233910c668a8dbc90cb) security: fix security alerts of gosec ### 📊 Changes **31 files changed** (+1215 additions, -205 deletions) <details> <summary>View changed files</summary> ➕ `.github/ISSUE_TEMPLATE/bug_report.md` (+23 -0) ➕ `.github/ISSUE_TEMPLATE/feature_request.md` (+20 -0) ➕ `.github/PULL_REQUEST_TEMPLATE.md` (+16 -0) ➕ `.github/publish-image/action.yaml` (+92 -0) ➕ `.github/workflows/README.md` (+90 -0) ➖ `.github/workflows/ci.yml` (+0 -39) 📝 `.github/workflows/codeql.yml` (+28 -45) ➕ `.github/workflows/dependency-review.yml` (+31 -0) ➖ `.github/workflows/docker-release.yml` (+0 -41) ➕ `.github/workflows/golangci-lint.yml` (+30 -0) ➕ `.github/workflows/gosec.yml` (+30 -0) ➕ `.github/workflows/osv-scan.yml` (+23 -0) ➕ `.github/workflows/release.yml` (+216 -0) ➕ `.github/workflows/scorecard.yml` (+63 -0) 📝 `.gitignore` (+1 -0) ➕ `.goreleaser.yml` (+80 -0) ➕ `.ko.yaml` (+14 -0) 📝 `.pre-commit-config.yaml` (+7 -1) ➕ `CHANGELOG.md` (+5 -0) 📝 `CODE_OF_CONDUCT.md` (+13 -9) _...and 11 more files_ </details> ### 📄 Description closes #21 --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>