Commit graph

658 commits

Author SHA1 Message Date
Alexey Pustovalov 4488c87b5e
Merge pull request #1860 from zabbix/dependabot/github_actions/actions/upload-artifact-7.0.0
Bump actions/upload-artifact from 6.0.0 to 7.0.0
2026-03-25 14:09:44 +09:00
Alexey Pustovalov 671c67a823
Merge pull request #1858 from zabbix/dependabot/github_actions/actions/attest-build-provenance-4
Bump actions/attest-build-provenance from 3 to 4
2026-03-25 14:09:34 +09:00
dependabot[bot] fd8d038b43
Bump github/codeql-action from 4.31.8 to 4.32.6
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.8 to 4.32.6.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](1b168cd394...0d579ffd05)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.32.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 06:07:23 +00:00
dependabot[bot] 7ebf775f06
Bump docker/build-push-action from 6.15.0 to 7.0.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.15.0 to 7.0.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](471d1dc4e0...d08e5c354a)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 06:07:06 +00:00
dependabot[bot] ac2263ee50
Bump step-security/harden-runner from 2.14.0 to 2.15.1
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.14.0 to 2.15.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](20cf305ff2...58077d3c7e)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 06:07:00 +00:00
dependabot[bot] 726e7c9f8e
Bump docker/setup-buildx-action from 3.10.0 to 4.0.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.10.0 to 4.0.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](b5ca514318...4d04d5d948)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-06 06:06:49 +00:00
dependabot[bot] b89d4fce8c
Bump docker/setup-qemu-action from 3.7.0 to 4.0.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3.7.0 to 4.0.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](c7c5346462...ce360397dd)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-05 06:07:01 +00:00
dependabot[bot] b513aaf187
Bump docker/login-action from 3.6.0 to 4.0.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.6.0 to 4.0.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](5e57cd1181...b45d80f862)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-05 06:06:54 +00:00
dependabot[bot] 76b8f5c790
Bump actions/dependency-review-action from 4.8.2 to 4.9.0
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.8.2 to 4.9.0.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](3c4e3dcb1a...2031cfc080)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-03-04 06:07:35 +00:00
dependabot[bot] 81186535e9
Bump actions/upload-artifact from 6.0.0 to 7.0.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](b7c566a772...bbbca2ddaa)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-27 06:07:16 +00:00
dependabot[bot] 7b9029c250
Bump actions/attest-build-provenance from 3 to 4
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 3 to 4.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-26 06:07:15 +00:00
dependabot[bot] 9ada47f88a
Bump crazy-max/ghaction-container-scan from 3 to 4
Bumps [crazy-max/ghaction-container-scan](https://github.com/crazy-max/ghaction-container-scan) from 3 to 4.
- [Release notes](https://github.com/crazy-max/ghaction-container-scan/releases)
- [Commits](https://github.com/crazy-max/ghaction-container-scan/compare/v3...v4)

---
updated-dependencies:
- dependency-name: crazy-max/ghaction-container-scan
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2026-02-17 06:06:41 +00:00
Alexey Pustovalov 8744bad832 Updated branch for scorecard 2026-01-26 16:00:48 +09:00
Alexey Pustovalov 20b7c3f566 Updated qemu for actions 2025-12-23 02:32:52 +09:00
Alexey Pustovalov ea2a43e692 Fix for RHEL images certification procedure 2025-12-21 10:53:10 +09:00
Alexey Pustovalov 1cfc72ebad Added additional host to white list 2025-12-20 22:38:19 +09:00
Alexey Pustovalov 339cc8bdb0 Added additional host to white list 2025-12-19 03:14:15 +09:00
Alexey Pustovalov d5e70bbc31
Merge pull request #1824 from zabbix/dependabot/github_actions/github/codeql-action-4.31.8
Bump github/codeql-action from 4.31.0 to 4.31.8
2025-12-17 13:06:31 +09:00
Alexey Pustovalov 863b1628bb
Merge pull request #1823 from zabbix/dependabot/github_actions/actions/cache-5.0.1
Bump actions/cache from 4.3.0 to 5.0.1
2025-12-17 13:06:18 +09:00
Alexey Pustovalov 186d29fc77
Merge pull request #1822 from zabbix/dependabot/github_actions/docker/setup-qemu-action-3.7.0
Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
2025-12-17 13:05:56 +09:00
dependabot[bot] 801a741d50
Bump actions/dependency-review-action from 4.8.1 to 4.8.2
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.8.1 to 4.8.2.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](40c09b7dc9...3c4e3dcb1a)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 4.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-17 04:05:33 +00:00
Alexey Pustovalov 89cb6bdc66
Merge pull request #1820 from zabbix/dependabot/github_actions/actions/upload-artifact-6.0.0
Bump actions/upload-artifact from 4.6.1 to 6.0.0
2025-12-17 13:05:17 +09:00
Alexey Pustovalov 005be07c63
Merge pull request #1819 from zabbix/dependabot/github_actions/peter-evans/dockerhub-description-5.0.0
Bump peter-evans/dockerhub-description from 4.0.0 to 5.0.0
2025-12-17 13:04:52 +09:00
Alexey Pustovalov eafb5340ff
Merge pull request #1818 from zabbix/dependabot/github_actions/actions/checkout-6.0.1
Bump actions/checkout from 5.0.0 to 6.0.1
2025-12-17 13:04:21 +09:00
Alexey Pustovalov 8d14b04c58
Merge pull request #1817 from zabbix/dependabot/github_actions/SonarSource/sonarqube-scan-action-7.0.0
Bump SonarSource/sonarqube-scan-action from 6.0.0 to 7.0.0
2025-12-17 13:03:53 +09:00
Alexey Pustovalov 4c52d38506
Merge pull request #1816 from zabbix/dependabot/github_actions/ossf/scorecard-action-2.4.3
Bump ossf/scorecard-action from 2.4.1 to 2.4.3
2025-12-17 13:03:41 +09:00
Alexey Pustovalov a75b0c69d7
Merge pull request #1815 from zabbix/dependabot/github_actions/step-security/harden-runner-2.14.0
Bump step-security/harden-runner from 2.13.1 to 2.14.0
2025-12-17 13:03:21 +09:00
dependabot[bot] 1a584b5a23
Bump actions/checkout from 5.0.0 to 6.0.1
Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](08c6903cd8...8e8c483db8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-16 01:32:47 +00:00
Alexey Pustovalov 50b027269f Updated allowed endpoints 2025-12-16 10:31:25 +09:00
dependabot[bot] 2d0e60d57f
Bump github/codeql-action from 4.31.0 to 4.31.8
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.31.0 to 4.31.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](4e94bd11f7...1b168cd394)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 06:12:07 +00:00
dependabot[bot] 2989ded3c1
Bump actions/cache from 4.3.0 to 5.0.1
Bumps [actions/cache](https://github.com/actions/cache) from 4.3.0 to 5.0.1.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](0057852bfa...9255dc7a25)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 5.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 06:11:58 +00:00
dependabot[bot] 53886b1e56
Bump docker/setup-qemu-action from 3.6.0 to 3.7.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3.6.0 to 3.7.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](29109295f8...c7c5346462)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-version: 3.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 06:11:44 +00:00
dependabot[bot] ef94106497
Bump actions/upload-artifact from 4.6.1 to 6.0.0
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.1 to 6.0.0.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](4cec3d8aa0...b7c566a772)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 06:11:36 +00:00
dependabot[bot] b3d5beabaa
Bump peter-evans/dockerhub-description from 4.0.0 to 5.0.0
Bumps [peter-evans/dockerhub-description](https://github.com/peter-evans/dockerhub-description) from 4.0.0 to 5.0.0.
- [Release notes](https://github.com/peter-evans/dockerhub-description/releases)
- [Commits](e98e4d1628...1b9a80c056)

---
updated-dependencies:
- dependency-name: peter-evans/dockerhub-description
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 06:11:31 +00:00
dependabot[bot] 750c9d982e
Bump SonarSource/sonarqube-scan-action from 6.0.0 to 7.0.0
Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 6.0.0 to 7.0.0.
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/v6.0.0...v7.0.0)

---
updated-dependencies:
- dependency-name: SonarSource/sonarqube-scan-action
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 06:11:14 +00:00
dependabot[bot] e7d4568afb
Bump ossf/scorecard-action from 2.4.1 to 2.4.3
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 2.4.1 to 2.4.3.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](f49aabe0b5...4eaacf0543)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-version: 2.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 06:11:11 +00:00
dependabot[bot] a333b4c03a
Bump step-security/harden-runner from 2.13.1 to 2.14.0
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.13.1 to 2.14.0.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](f4a75cfd61...20cf305ff2)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-15 06:11:06 +00:00
Alexey Pustovalov 13dd4cf567 Updated allowed endpoints 2025-12-15 15:04:55 +09:00
Alexey Pustovalov 739f83c427
Merge pull request #1746 from zabbix/dependabot/github_actions/docker/metadata-action-5.8.0
Bump docker/metadata-action from 5.7.0 to 5.8.0
2025-12-15 14:00:58 +09:00
Alexey Pustovalov 6b11be7b10
Merge pull request #1753 from zabbix/dependabot/github_actions/actions/checkout-5.0.0
Bump actions/checkout from 4.1.7 to 5.0.0
2025-12-15 14:00:46 +09:00
Alexey Pustovalov 866aa4e53c
Merge pull request #1766 from zabbix/dependabot/github_actions/actions/attest-build-provenance-3
Bump actions/attest-build-provenance from 2 to 3
2025-12-15 14:00:32 +09:00
Alexey Pustovalov 1ab0f7910a
Merge pull request #1769 from zabbix/dependabot/github_actions/actions/setup-python-6.0.0
Bump actions/setup-python from 5.4.0 to 6.0.0
2025-12-15 14:00:21 +09:00
Alexey Pustovalov 70ebd63b52
Merge pull request #1773 from zabbix/dependabot/github_actions/step-security/harden-runner-2.13.1
Bump step-security/harden-runner from 2.11.0 to 2.13.1
2025-12-15 14:00:09 +09:00
Alexey Pustovalov 47c3305a6c
Merge pull request #1781 from zabbix/dependabot/github_actions/actions/cache-4.3.0
Bump actions/cache from 4.2.2 to 4.3.0
2025-12-15 13:59:57 +09:00
Alexey Pustovalov dcf2cda1a1
Merge pull request #1788 from zabbix/dependabot/github_actions/docker/login-action-3.6.0
Bump docker/login-action from 3.2.0 to 3.6.0
2025-12-15 13:59:45 +09:00
Alexey Pustovalov 540346db0a
Merge pull request #1797 from zabbix/dependabot/github_actions/actions/dependency-review-action-4.8.1
Bump actions/dependency-review-action from 4.3.3 to 4.8.1
2025-12-15 13:59:22 +09:00
Alexey Pustovalov f0af7685c7
Merge pull request #1798 from zabbix/dependabot/github_actions/sigstore/cosign-installer-4.0.0
Bump sigstore/cosign-installer from 3.9.2 to 4.0.0
2025-12-15 13:59:11 +09:00
Alexey Pustovalov c2dee31637
Merge pull request #1802 from zabbix/dependabot/github_actions/github/codeql-action-4.31.0
Bump github/codeql-action from 3.28.10 to 4.31.0
2025-12-15 13:58:29 +09:00
Alexey Pustovalov c826638d38 Removed CentOS 10 from scan for vulnerabilities 2025-12-04 13:33:15 +09:00
Alexey Pustovalov f76b8d285a Fixed RedHat images build process 2025-12-02 15:57:37 +09:00
dependabot[bot] 407291fa27
Bump github/codeql-action from 3.28.10 to 4.31.0
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.10 to 4.31.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](b56ba49b26...4e94bd11f7)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.31.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-27 06:26:17 +00:00
dependabot[bot] 69342d9c63
Bump sigstore/cosign-installer from 3.9.2 to 4.0.0
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.9.2 to 4.0.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](d58896d6a1...faadad0cce)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-17 06:08:47 +00:00
dependabot[bot] b5cd390fec
Bump actions/dependency-review-action from 4.3.3 to 4.8.1
Bumps [actions/dependency-review-action](https://github.com/actions/dependency-review-action) from 4.3.3 to 4.8.1.
- [Release notes](https://github.com/actions/dependency-review-action/releases)
- [Commits](72eb03d02c...40c09b7dc9)

---
updated-dependencies:
- dependency-name: actions/dependency-review-action
  dependency-version: 4.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-13 06:12:49 +00:00
dependabot[bot] f9d4a03f85
Bump docker/login-action from 3.2.0 to 3.6.0
Bumps [docker/login-action](https://github.com/docker/login-action) from 3.2.0 to 3.6.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](0d4c9c5ea7...5e57cd1181)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-30 06:09:05 +00:00
dependabot[bot] 5630d98490
Bump SonarSource/sonarqube-scan-action in /.github/workflows
Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 5.3.1 to 6.0.0.
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/v5.3.1...v6.0.0)

---
updated-dependencies:
- dependency-name: SonarSource/sonarqube-scan-action
  dependency-version: 6.0.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-26 13:20:24 +00:00
dependabot[bot] 422e32f250
Bump SonarSource/sonarqube-scan-action in /.github/workflows
Bumps [SonarSource/sonarqube-scan-action](https://github.com/sonarsource/sonarqube-scan-action) from 5.2.0 to 5.3.1.
- [Release notes](https://github.com/sonarsource/sonarqube-scan-action/releases)
- [Commits](https://github.com/sonarsource/sonarqube-scan-action/compare/v5.2.0...v5.3.1)

---
updated-dependencies:
- dependency-name: SonarSource/sonarqube-scan-action
  dependency-version: 5.3.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-26 02:59:40 +00:00
dependabot[bot] 30b3b669fb
Bump actions/cache from 4.2.2 to 4.3.0
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.2 to 4.3.0.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](d4323d4df1...0057852bfa)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-25 06:09:59 +00:00
dependabot[bot] 724a95d843
Bump step-security/harden-runner from 2.11.0 to 2.13.1
Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.11.0 to 2.13.1.
- [Release notes](https://github.com/step-security/harden-runner/releases)
- [Commits](4d991eb9b9...f4a75cfd61)

---
updated-dependencies:
- dependency-name: step-security/harden-runner
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-10 06:10:19 +00:00
dependabot[bot] e670510045
Bump actions/setup-python from 5.4.0 to 6.0.0
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 5.4.0 to 6.0.0.
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](42375524e2...e797f83bcb)

---
updated-dependencies:
- dependency-name: actions/setup-python
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-04 11:15:59 +00:00
dependabot[bot] f8ab63edab
Bump actions/attest-build-provenance from 2 to 3
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 2 to 3.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v2...v3)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-29 06:09:31 +00:00
dependabot[bot] b8688e438c
Bump actions/checkout from 4.1.7 to 5.0.0
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.1.7 to 5.0.0.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](692973e3d9...08c6903cd8)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-12 13:56:17 +00:00
Alexey Pustovalov 54b5482cb1 Removed static cosign version 2025-08-06 13:24:12 +09:00
Alexey Pustovalov 0940058fd6
Merge pull request #1731 from zabbix/dependabot/github_actions/sigstore/cosign-installer-3.9.2
Bump sigstore/cosign-installer from 3.8.1 to 3.9.2
2025-08-06 12:49:37 +09:00
dependabot[bot] 3ef7c9131c
Bump docker/metadata-action from 5.7.0 to 5.8.0
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.7.0 to 5.8.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](902fa8ec7d...c1e51972af)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-08-04 09:13:33 +00:00
Alexey Pustovalov 80ae6c771f Updated Sonacloud workflow 2025-07-18 15:45:11 +09:00
dependabot[bot] 33b0cee1db
Bump sigstore/cosign-installer from 3.8.1 to 3.9.2
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.8.1 to 3.9.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](d7d6bc7722...d58896d6a1)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 3.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-07-18 06:32:33 +00:00
Alexey Pustovalov 136d09f45e Fixed PostgreSQL 17 on Ubuntu images 2025-07-16 11:17:32 +09:00
Alexey Pustovalov ea607c9ddd Updated Sonarcloud default branch 2025-07-01 11:20:08 +03:00
Alexey Pustovalov 6ae4e8adf5 Increased build time for images 2025-05-29 10:26:18 +09:00
Alexey Pustovalov 9a0f5773e3 Using plain Windows nanoserver image for agent and agent2 images 2025-05-26 11:29:59 +09:00
Alexey Pustovalov 0101fb79b4 Using Windows nanoserver image instead of old Powershell image 2025-05-25 13:08:22 +00:00
Alexey Pustovalov de36c79a2c Merge pull request #1626 from zabbix/dependabot/github_actions/actions/setup-python-5.4.0
Bump actions/setup-python from 5.0.0 to 5.4.0
2025-03-06 16:02:47 +09:00
Alexey Pustovalov 0b8f537d6d Merge pull request #1638 from zabbix/dependabot/github_actions/step-security/harden-runner-2.11.0
Bump step-security/harden-runner from 2.10.3 to 2.11.0
2025-03-06 16:00:08 +09:00
Alexey Pustovalov 75bf967279 Merge pull request #1641 from zabbix/dependabot/github_actions/sigstore/cosign-installer-3.8.1
Bump sigstore/cosign-installer from 3.6.0 to 3.8.1
2025-03-06 16:00:08 +09:00
Alexey Pustovalov a5dfac866c Merge pull request #1644 from zabbix/dependabot/github_actions/actions/upload-artifact-4.6.1
Bump actions/upload-artifact from 4.6.0 to 4.6.1
2025-03-06 16:00:08 +09:00
Alexey Pustovalov 742882ee0b Merge pull request #1645 from zabbix/dependabot/github_actions/ossf/scorecard-action-2.4.1
Bump ossf/scorecard-action from 2.3.1 to 2.4.1
2025-03-06 16:00:08 +09:00
Alexey Pustovalov c29a5dd8c7 Merge pull request #1646 from zabbix/dependabot/github_actions/github/codeql-action-3.28.10
Bump github/codeql-action from 3.28.1 to 3.28.10
2025-03-06 16:00:08 +09:00
dependabot[bot] fcd7fb44ce Bump docker/setup-qemu-action from 3.4.0 to 3.6.0
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 3.4.0 to 3.6.0.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](4574d27a47...29109295f8)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-06 15:56:21 +09:00
dependabot[bot] c75787321d Bump actions/cache from 4.2.0 to 4.2.2
Bumps [actions/cache](https://github.com/actions/cache) from 4.2.0 to 4.2.2.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](1bd1e32a3b...d4323d4df1)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-06 15:54:47 +09:00
dependabot[bot] 9303c172c5 Bump docker/metadata-action from 5.5.1 to 5.7.0
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.5.1 to 5.7.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](8e5442c4ef...902fa8ec7d)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-06 15:54:47 +09:00
dependabot[bot] 1f0170cbd0 Bump docker/build-push-action from 6.12.0 to 6.15.0
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.12.0 to 6.15.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](67a2d409c0...471d1dc4e0)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-06 15:54:45 +09:00
dependabot[bot] 495eda0bff Bump docker/setup-buildx-action from 3.9.0 to 3.10.0
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](f7ce87c1d6...b5ca514318)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-03-06 15:54:26 +09:00
Alexey Pustovalov c8820abfe4 Removed arm64 platform for web-service on Oracle Linux 2025-03-05 16:45:12 +09:00
Alexey Pustovalov 8000c6b5e3 Removed cache for base images 2025-01-26 16:19:55 +09:00
Alexey Pustovalov 75b7bd8108 Removed cache for base images 2025-01-26 16:17:40 +09:00
Alexey Pustovalov d2b828e8e1 Removed cache for base images 2025-01-26 16:16:09 +09:00
Alexey Pustovalov e14e23dbe5 Removed cache for base images 2025-01-26 15:31:33 +09:00
Alexey Pustovalov 5d918e5d59 Removed cache for base images 2025-01-25 16:38:29 +09:00
Alexey Pustovalov 5f1b6289cf Removed cache for base images 2025-01-25 13:21:18 +09:00
Alexey Pustovalov 3976b96c74 Removed cache for base images 2025-01-24 17:22:50 +09:00
Alexey Pustovalov a3107c7031 Merge pull request #1605 from zabbix/dependabot/github_actions/step-security/harden-runner-2.10.3
Bump step-security/harden-runner from 2.9.1 to 2.10.3
2025-01-17 17:13:22 +09:00
Alexey Pustovalov 590deee1a8 Merge pull request #1609 from zabbix/dependabot/github_actions/github/codeql-action-3.28.1
Bump github/codeql-action from 3.26.1 to 3.28.1
2025-01-17 17:13:22 +09:00
Alexey Pustovalov e4e72484a5 Merge pull request #1604 from zabbix/dependabot/github_actions/docker/setup-qemu-action-3.3.0
Bump docker/setup-qemu-action from 3.1.0 to 3.3.0
2025-01-17 17:13:22 +09:00
Alexey Pustovalov aaa83a5873 Merge pull request #1613 from zabbix/dependabot/github_actions/docker/build-push-action-6.12.0
Bump docker/build-push-action from 6.7.0 to 6.12.0
2025-01-17 17:13:22 +09:00
Alexey Pustovalov ca0d629f17 Merge pull request #1603 from zabbix/dependabot/github_actions/actions/upload-artifact-4.6.0
Bump actions/upload-artifact from 4.3.6 to 4.6.0
2025-01-17 17:13:22 +09:00
Alexey Pustovalov dfe97fa079 Merge pull request #1583 from zabbix/dependabot/github_actions/actions/cache-4.2.0
Bump actions/cache from 4.0.0 to 4.2.0
2025-01-17 17:13:22 +09:00
Alexey Pustovalov 429f5e7568 Added container scan tool 2025-01-17 16:44:37 +09:00
Alexey Pustovalov 9b2975fddf Fixed sonarcloud project name 2025-01-13 19:30:38 +09:00
Alexey Pustovalov a33d9ae106 Updated build procedure for Windows containers 2025-01-10 17:42:07 +09:00
Alexey Pustovalov 5aa63e8a4a Added image for Windows Server 2025 2024-12-27 12:10:38 +09:00
Alexey Pustovalov 11fbb299b5 Merge various changes with Zabbix 7.2 branch 2024-12-25 01:29:57 +09:00
Alexey Pustovalov 5730d6c0d2 Move sources directory and introduce additional build context 2024-12-25 01:18:43 +09:00
Alexey Pustovalov a01af62dff Migrated images to use native Zabbix environment variables 2024-12-23 21:23:06 +09:00
Alexey Pustovalov c952d4ef69 Migrated images to use native Zabbix environment variables 2024-12-23 21:22:01 +09:00
Alexey Pustovalov 0d52aec96d Added firewall rule 2024-12-05 15:39:33 +09:00
dependabot[bot] 3de0455110 Bump actions/attest-build-provenance from 1 to 2
Bumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 1 to 2.
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v1...v2)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-12-05 15:38:12 +09:00
Alexey Pustovalov 2f0b2c44f3 Fixed NotoSansCJKjp fonts URL 2024-08-27 13:56:33 +09:00
Alexey Pustovalov 07fbd9e7d5 Updated cosign version 2024-08-14 17:47:58 +09:00
Alexey Pustovalov b06ec9b209 Updated cosign version 2024-08-14 17:47:50 +09:00
Alexey Pustovalov b6266b4060 Merge pull request #1485 from zabbix/dependabot/github_actions/actions/upload-artifact-4.3.6
Bump actions/upload-artifact from 4.3.4 to 4.3.6
2024-08-14 17:38:37 +09:00
Alexey Pustovalov b3781bc08f Merge pull request #1491 from zabbix/dependabot/github_actions/github/codeql-action-3.26.1
Bump github/codeql-action from 3.25.11 to 3.26.1
2024-08-14 17:38:27 +09:00
Alexey Pustovalov 7d352bcfbc Merge pull request #1492 from zabbix/dependabot/github_actions/docker/build-push-action-6.7.0
Bump docker/build-push-action from 6.3.0 to 6.7.0
2024-08-14 17:37:37 +09:00
Alexey Pustovalov 7819ec2df4 Merge pull request #1487 from zabbix/dependabot/github_actions/sigstore/cosign-installer-3.6.0
Bump sigstore/cosign-installer from 3.4.0 to 3.6.0
2024-08-14 17:37:12 +09:00
Alexey Pustovalov 39e9e5a42c Merge pull request #1483 from zabbix/dependabot/github_actions/step-security/harden-runner-2.9.1
Bump step-security/harden-runner from 2.8.1 to 2.9.1
2024-08-14 17:36:35 +09:00
Alexey Pustovalov d1961d355b Using audit mode to learn new CentOS repo 2024-07-29 15:50:40 +09:00
Alexey Pustovalov 11c33b8007 Removed vulnerability scanner 2024-07-24 18:37:03 +09:00
Alexey Pustovalov 50ebc1abbc Added vulnerability scanner 2024-07-24 18:29:09 +09:00
Pustovalov Alexey a8136afac4 Updated versions of GitHub actions 2024-07-08 13:31:41 +03:00
Alexey Pustovalov d658a420f7 Updated buildah-build action 2024-06-02 01:56:21 +09:00
Alexey Pustovalov 1c3e198e18 Added attest to Windows (revert) 2024-05-30 21:21:04 +09:00
Alexey Pustovalov 4077cf034c Added attest to Windows 2024-05-30 20:36:54 +09:00
Alexey Pustovalov ebf72efd9e Revert multiworkflow implementation for Windows images 2024-05-21 22:10:46 +09:00
Alexey Pustovalov 7dfb676296 Updated build process for Zabbix agent (windows) 2024-05-21 18:18:27 +09:00
Alexey Pustovalov 445ec3286a Updated build process for Zabbix agent (windows) 2024-05-21 18:16:07 +09:00
Alexey Pustovalov e2f6793ee4 Updated build process for Zabbix agent (windows) 2024-05-21 18:14:26 +09:00
Alexey Pustovalov 19dea3a581 Updated build process for Zabbix agent (windows) 2024-05-21 17:43:07 +09:00
Alexey Pustovalov a8754ffc24 Updated build process for Zabbix agent (windows) 2024-05-21 17:05:44 +09:00
Alexey Pustovalov 4ee11fb41d Updated build process for Zabbix agent (windows) 2024-05-21 16:34:23 +09:00
Alexey Pustovalov 633fa47b46 Updated build process for Zabbix agent (windows) 2024-05-21 16:04:51 +09:00
Alexey Pustovalov 1fba05dcc9 Updated build process for Zabbix agent (windows) 2024-05-21 16:02:05 +09:00
Alexey Pustovalov 0741fb6238 Updated build process for Zabbix agent (windows) 2024-05-21 15:58:44 +09:00
Alexey Pustovalov d63a7732ba Updated build process for Zabbix agent (windows) 2024-05-21 15:45:17 +09:00
Alexey Pustovalov 47f4f62147 Updated build process for Zabbix agent (windows) 2024-05-20 16:41:12 +09:00
Alexey Pustovalov 0ff1d7b794 Updated build process for Zabbix agent (windows) 2024-05-20 13:12:24 +09:00
Alexey Pustovalov 3916d7a617 Added new input param for RHEL build 2024-05-08 16:29:42 +09:00
Alexey Pustovalov 39dad999ae Added new input param for RHEL build 2024-05-08 16:05:28 +09:00
Alexey Pustovalov 72f60d44dc Allowed more CentOS repo mirrors 2024-04-26 19:08:17 +09:00
Alexey Pustovalov d7b9a197c6 Updated Ubuntu to 24.04 2024-04-24 21:47:29 +09:00
Alexey Pustovalov 83b0bf637f Updated Ubuntu to 24.04 2024-04-24 15:38:35 +09:00
Alexey Pustovalov 55e9a68f3a Added SBOM for images 2024-02-28 18:05:16 +09:00
Alexey Pustovalov 273604729a Updated documentation and prepared documentation for RHEL 2024-02-21 15:37:42 +09:00
Alexey Pustovalov 1f6a7fe315 Updated documentation and prepared documentation for RHEL 2024-02-21 15:04:26 +09:00
Alexey Pustovalov 79605b667f Updated building images workflow 2024-02-20 16:32:53 +09:00
StepSecurity Bot 541d3c69a9 [StepSecurity] ci: Harden GitHub Actions
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
2024-02-20 16:26:28 +09:00
Alexey Pustovalov 54e2b7ef84 Added workflow to update Red Hat Container Catalog 2024-02-20 16:03:49 +09:00
Alexey Pustovalov 56d6294594 Added workflow to update Red Hat Container Catalog 2024-02-19 23:13:12 +09:00
Alexey Pustovalov a33351fa34 Updated building images workflow 2024-02-19 22:15:38 +09:00
Alexey Pustovalov d08161d184 Updated building images workflow 2024-02-19 19:16:49 +09:00
Alexey Pustovalov c12f13f6f4 Updated building images workflow 2024-02-19 18:28:42 +09:00
Alexey Pustovalov 833baae46d Updated building images workflow 2024-02-19 14:57:53 +09:00