Merge pull request #1 from initializ-buildpacks/automation/github-con…

…fig/update

Updates github-config

.github/workflows/lint.yml

@@ -1,4 +1,3 @@
-#
 name: Lint
 
 on:

.github/workflows/publish-releases.yml

@@ -38,4 +38,4 @@ jobs:
           issue_body: |
             Publish All Draft Releases workflow [failed](https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}).
           comment_body: |
-             Another failure occurred: https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}
+             Another failure occurred: https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}

.github/workflows/push-buildpackage.yml

@@ -5,6 +5,10 @@ on:
     types:
     - published
 
+permissions:
+  id-token: write 
+  contents: read
+
 jobs:
   push:
     name: Push
@@ -39,6 +43,7 @@ jobs:
           exit 1
         fi
 
+
     - name: Push to DockerHub
       id: push
       env:

.github/workflows/synchronize-labels.yml

@@ -1,4 +1,3 @@
-# sync
 name: Synchronize Labels
 "on":
     push:

.github/workflows/test-pull-request.yml

@@ -6,7 +6,7 @@ on:
     - main
 
 concurrency:
-  # only one instance of test suite per PR at one time -
+  # only one instance of test suite per PR at one time
   group: pr-${{ github.event.number }}
   cancel-in-progress: true
 

.github/workflows/update-dependencies-from-metadata.yml

@@ -221,21 +221,6 @@ jobs:
           echo "artifact-file=$(basename ./*.tgz)" >> "$GITHUB_OUTPUT"
           echo "checksum-file=$(basename ./*.tgz.checksum)" >> "$GITHUB_OUTPUT"
 
-      - name: Configure AWS Credentials
-        uses: aws-actions/configure-aws-credentials@v2
-        with:
-          aws-access-key-id: ${{ secrets.AWS_S3_DEPENDENCIES_ACCESS_KEY_ID }}
-          aws-secret-access-key: ${{ secrets.AWS_S3_DEPENDENCIES_SECRET_ACCESS_KEY }}
-          aws-region: us-east-1
-
-      - name: Upload to S3
-        id: upload
-        uses: initializ-buildpacks/github-config/actions/dependency/upload-to-s3@main
-        with:
-          bucket-name: "initializ-buildpacks"
-          dependency-name: ${{ needs.retrieve.outputs.id }}
-          artifact-path: ${{ steps.get-file-names.outputs.artifact-file }}
-
       - name: Get Checksum
         id: get-checksum
         run: echo "checksum=$(cat ${{ steps.get-file-names.outputs.checksum-file }})" >> "$GITHUB_OUTPUT"
@@ -282,7 +267,7 @@ jobs:
       - name: Checkout Branch
         uses: initializ-buildpacks/github-config/actions/pull-request/checkout-branch@main
         with:
-          branch: automation/dependencies/update-from-metadata
+          branch: automations/dependencies/update-from-metadata
 
       - name: Make Temporary Artifact Directory
         id: make-outputdir
@@ -315,19 +300,19 @@ jobs:
           keyid: ${{ secrets.INITIALIZ_BOT_GPG_SIGNING_KEY_ID }}
           key: ${{ secrets.INITIALIZ_BOT_GPG_SIGNING_KEY }}
 
-      - name: Push Branch 'automation/dependencies/update-from-metadata'
+      - name: Push Branch 'automations/dependencies/update-from-metadata'
         if: ${{ steps.commit.outputs.commit_sha != '' }}
         uses: initializ-buildpacks/github-config/actions/pull-request/push-branch@main
         with:
-          branch: automation/dependencies/update-from-metadata
+          branch: automations/dependencies/update-from-metadata
 
       - name: Open Pull Request
         if: ${{ steps.commit.outputs.commit_sha != '' }}
         uses: initializ-buildpacks/github-config/actions/pull-request/open@main
         with:
           token: ${{ secrets.PAT }}
           title: "Updates buildpack.toml with ${{ steps.update.outputs.new-versions }}"
-          branch: automation/buildpack.toml/update-from-metadata
+          branch: automations/buildpack.toml/update-from-metadata
 
   failure:
     name: Alert on Failure

.github/workflows/update-github-config.yml

@@ -27,7 +27,7 @@ jobs:
     - name: Checkout Branch
       uses: initializ-buildpacks/github-config/actions/pull-request/checkout-branch@main
       with:
-        branch: automation/github-config/update
+        branch: automations/github-config/update
 
     - name: Run the sync action
       uses: initializ-buildpacks/github-config/actions/sync@main
@@ -51,15 +51,15 @@ jobs:
       if: ${{ steps.commit.outputs.commit_sha != '' }}
       uses: initializ-buildpacks/github-config/actions/pull-request/push-branch@main
       with:
-        branch: automation/github-config/update
+        branch: automations/github-config/update
 
     - name: Open Pull Request
       if: ${{ steps.commit.outputs.commit_sha != '' }}
       uses: initializ-buildpacks/github-config/actions/pull-request/open@main
       with:
         token: ${{ secrets.PAT }}
         title: "Updates github-config"
-        branch: automation/github-config/update
+        branch: automations/github-config/update
 
   failure:
     name: Alert on Failure

.github/workflows/update-go-mod-version.yml → .github/workflows/update-go-mod-version.ym

@@ -90,4 +90,4 @@ jobs:
           issue_body: |
             Update Go Mod Version workflow [failed](https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}).
           comment_body: |
-            Another failure occurred: https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}
+            Another failure occurred: https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}

scripts/.util/builders.sh

@@ -19,7 +19,7 @@ function util::builders::list() {
 
   if [[ -z "${builders}" ]]; then
     util::print::info "No builders specified. Falling back to default builder..."
-    builders="$(jq --compact-output --null-input '["index.docker.io/paketobuildpacks/builder-jammy-buildpackless-base:latest"]')"
+    builders="$(jq --compact-output --null-input '["index.docker.io/initializbuildpacks/securepacks-initzbuilder:latest"]')"
   fi
 
   echo "${builders}"

scripts/.util/tools.sh

@@ -235,4 +235,4 @@ function util::tools::tests::checkfocus() {
     util::print::success "** GO Test Succeeded **" 197
   fi
   rm "${testout}"
-}
+}

scripts/build.sh

@@ -99,4 +99,4 @@ function cmd::build() {
   fi
 }
 
-main "${@:-}"
+main "${@:-}"