Merge branch 'main' into feat/credential_type

Azure · Apr 10, 2024 · b6f82d6 · b6f82d6
2 parents 25e85d5 + b838f3d
commit b6f82d6
Show file tree

Hide file tree

Showing 3 changed files with 52 additions and 24 deletions.
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
@@ -0,0 +1,15 @@
+version: 2
+
+updates:
+  - package-ecosystem: "nuget"
+    directory: "/Notation.Plugin.AzureKeyVault" #Notation.Plugin.AzureKeyVault.csproj
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "nuget"
+    directory: "/Notation.Plugin.AzureKeyVault.Tests" #Notation.Plugin.AzureKeyVault.Tests.csproj
+    schedule:
+      interval: "daily"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -34,11 +34,11 @@ jobs:
     runs-on: ${{ matrix.config.os }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Setup .NET
-        uses: actions/setup-dotnet@v3
+        uses: actions/setup-dotnet@v4
         with:
           dotnet-version: '8.0.x'
       - name: Setup ARM64 Emulator
@@ -58,7 +58,7 @@ jobs:
         shell: bash
         run: python3 ./scripts/build.py "${GITHUB_REF_NAME}" ${{ matrix.config.runtime }} ${{ matrix.config.build_args }}
       - name: Upload ${{ matrix.config.runtime }} artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.config.runtime }}
           path: ${{ github.workspace }}/bin/artifacts/*
@@ -72,18 +72,18 @@ jobs:
     needs: build
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Download artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           name: ${{ matrix.runtime }}
           path: ${{ github.workspace }}/bin/artifacts
       - name: Codesign
         run: bash ./scripts/codesign.sh
       - name: Upload ${{ matrix.runtime }} artifact
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         with:
           name: ${{ matrix.runtime }}
           path: ${{ github.workspace }}/bin/artifacts
@@ -94,11 +94,11 @@ jobs:
     needs: macos_codesign
     steps:
       - name: Checkout
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Download artifacts
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with:
           path: ${{ github.workspace }}/bin/artifacts
       - name: Create release

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
@@ -22,17 +22,18 @@ jobs:
       statuses: write
     steps:
       - name: Checkout Code
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
       - name: Lint Code Base
-        uses: super-linter/super-linter@v5
+        uses: super-linter/super-linter@v6
         env:
           VALIDATE_ALL_CODEBASE: false
           DEFAULT_BRANCH: main
           DEFAULT_WORKSPACE: ./Notation.Plugin.AzureKeyVault
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           FILTER_REGEX_EXCLUDE: '.*Tests/.*|.*.yml|.*/scripts/generate-certs.sh|.*.py'
+          VALIDATE_CHECKOV: false
           VALIDATE_MARKDOWN: false
   test:
     name: Unit Testing and Build
@@ -46,18 +47,22 @@ jobs:
         with:
           dotnet-version: '8.0.x'
       - name: Check out code into the project directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Run unit tests
         run: make test
       - name: Upload coverage reports to Codecov
-        uses: codecov/codecov-action@v3
+        uses: codecov/codecov-action@v4
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
       - name: Build Linux Binary
         run: |
           # the binary will be used in E2E test
           python3 ./scripts/build.py v0.0.1 linux-x64 --enable-aot
       - name: Upload Linux artifact
         if: github.event.pull_request.head.repo.full_name == github.repository || github.event_name == 'push'
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: linux-amd64-binary
           path: ./bin/artifacts/notation-azure-kv_0.0.1_linux_amd64.tar.gz
@@ -68,7 +73,7 @@ jobs:
           python3 ./scripts/build.py v0.0.1 osx-x64
       - name: Upload macOS artifact
         if: github.event.pull_request.head.repo.full_name == github.repository || github.event_name == 'push'
-        uses: actions/upload-artifact@v2
+        uses: actions/upload-artifact@v4
         with:
           name: darwin-amd64-binary
           path: ./bin/artifacts/notation-azure-kv_0.0.1_darwin_amd64.tar.gz
@@ -79,8 +84,10 @@ jobs:
     needs: test
     steps:
       - name: Check out code into the project directory
-        uses: actions/checkout@v3
-      - uses: actions/download-artifact@v3
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/download-artifact@v4
         with:
           name: linux-amd64-binary
           path: ./bin/artifacts
@@ -103,8 +110,10 @@ jobs:
     if: github.event.pull_request.head.repo.full_name == github.repository || github.event_name == 'push'
     steps:
       - name: Check out code into the project directory
-        uses: actions/checkout@v3
-      - uses: actions/download-artifact@v3
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/download-artifact@v4
         with:
           name: linux-amd64-binary
           path: ./bin/artifacts
@@ -124,7 +133,7 @@ jobs:
           docker tag hello-world:latest localhost:5000/hello-world:v1
           docker push localhost:5000/hello-world:v1
       - name: Azure login
-        uses: azure/login@v1
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
       - name: E2E testing
@@ -139,7 +148,9 @@ jobs:
     if: github.event.pull_request.head.repo.full_name == github.repository || github.event_name == 'push'
     steps:
       - name: Check out code into the project directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
       - name: Setup .NET
         uses: actions/setup-dotnet@v4
         with:
@@ -165,7 +176,7 @@ jobs:
           docker push localhost:5000/hello-world:v1
         shell: pwsh
       - name: Azure login
-        uses: azure/login@v1
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
       - name: E2E testing
@@ -180,8 +191,10 @@ jobs:
     if: github.event.pull_request.head.repo.full_name == github.repository || github.event_name == 'push'
     steps:
       - name: Check out code into the project directory
-        uses: actions/checkout@v3
-      - uses: actions/download-artifact@v3
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/download-artifact@v4
         with:
           name: darwin-amd64-binary
           path: ./bin/artifacts
@@ -206,7 +219,7 @@ jobs:
           tar -zxf oras.tar.gz
           ./oras push localhost:5000/hello-world:v1 --artifact-type  application/octet-stream ./LICENSE
       - name: Azure login
-        uses: azure/login@v1
+        uses: azure/login@v2
         with:
           creds: ${{ secrets.AZURE_CREDENTIALS }}
       - name: E2E testing