Discharge7443/fleet
1
0
Fork 0
Code Issues Pull Requests Actions 8 Packages Projects Releases Wiki Activity
5,533 Commits 2 Branches 0 Tags
df014bd508cf12d527da2ced6ff2cb4d129ea3d2
Commit Graph
303 Commits
Author SHA1 Message Date
Roberto Dip 2397d744a2 fix conditional clauses to run workflows (#7580) 
In https://github.com/fleetdm/fleet/pull/7399 we accidentally:

1. added a condition to `.github/workflows/fleet-and-orbit.yml`  that always evaluates to `false` making this workflow always fail
2. modified the condition of `.github/workflows/fleetctl-preview-latest.yml` 

This reverts those changes.
 2022-09-06 10:20:45 -03:00
Luke Heath b1c46b4063 Set dependabot to check npm production dependencies only (#7566) 2022-09-02 14:16:26 -05:00
Luke HeathandGuillaume Ross 6cdd053ead Set go and npm reviewers to DRI only (#7542) 
Co-authored-by: Guillaume Ross <guillaume@fleetdm.com>
 2022-09-02 13:06:22 -05:00
Guillaume Ross fbb88b18b3 Tentative dependabot config with assignees (#7488) 
I am not 100% sure the npm thing for / and /website separately will work as intended but this should already make things more precise
 2022-08-31 14:59:36 -05:00
Roberto Dip 43785428fb add workflow to test for uncommited schema changes (#7467) 
This adds a new workflow to CI in order to test that the PR doesn't contain uncommited schema changes, which are the source of many merge conflicts and developer frustration.
 2022-08-31 10:47:58 -03:00
dependabot[bot] 74839bc134 Bump dawidd6/action-download-artifact from 2.22.0 to 2.23.0 (#7471) 
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 2.22.0 to 2.23.0.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/ea71f332a90fd52416b1629b933dcf7e0ccd421d...7847792dd435a50521b8e3bd3576dae7459d1fa8)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-08-31 07:49:57 -03:00
dependabot[bot] 200ddfaaff Bump actions/checkout from 2 to 3.0.2 (#7301) 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.0.2.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v2...2541b1294d2704b0964813337f33b291d3f8596b)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-08-31 07:44:22 -03:00
dependabot[bot] fda99bf3ca Bump github/codeql-action from 2.1.17 to 2.1.21 (#7400) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.17 to 2.1.21.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/0c670bbf0414f39666df6ce8e718ec5662c21e03...c7f292ea4f542c473194b33813ccd4c207a6c725)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-08-31 07:42:53 -03:00
dependabot[bot] 9e18a33eff Bump actions/cache (#7344) 
Bumps [actions/cache](https://github.com/actions/cache) from 661fd3eb7f2f20d8c7c84bc2b0509efd7a826628 to 3.0.8. This release includes the previously tagged commit.
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/661fd3eb7f2f20d8c7c84bc2b0509efd7a826628...fd5de65bc895cf536527842281bea11763fefd77)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-08-31 07:41:09 -03:00
Roberto Dip 715f320be1 reduce scope in which packaging and preview actions are run (#7429) 2022-08-29 15:38:30 -03:00
Roberto Dip 3d75ddcdc2 increase the CI timeout to install Docker on macOS (#7430) 
in #7399 we reduced the timeout to 10 minutes, however there are multiple timing out and failing on main on the install docker step.
 2022-08-29 12:50:16 -03:00
Michal Nicpon f7b394b1a3 fix brew install warning (#7399) 2022-08-25 15:26:02 -06:00
Noah Talerman b0e37accc9 Update "Learn how to use Fleet" for Fleet Sandbox (#7142) 
- Update "Learn how to use Fleet" docs page to walk a Fleet Sandbox user through adding their device and running a query
- Add a "Get operating system information" query to standard query library for the "Learn how to use Fleet" walkthrough
- Update Fleet's top level README to point users who want to try Fleet to Fleet Sandbox
- Update "How to install osquery..." (macOS, Windows, Linux) blog posts to point users who want to try Fleet to Fleet Sandbox
- Move `fleetctl preview` questions to "Contributing" FAQ section in docs. This is because `fleetctl preview` is now a testing tool for Fleet contributors
- Update "Deploying" docs to point users who want to try Fleet to Fleet Sandbox
 2022-08-19 14:13:15 -04:00
Zach Wasserman ecb428a904 Prepare for Orbit 1.1.0 (#7315) 2022-08-19 08:27:50 -07:00
Zach Wasserman abe76968f7 Generate targets for osquery 5.5.1 (#7290) 2022-08-19 08:15:24 -07:00
Zach Wasserman c3ab51bea5 Generate targets for osquery 5.5.0 (#7265) 2022-08-18 15:00:58 +00:00
Roberto Dip 05ddeade90 add back-end implementation for SSO JIT provisioning (#7182) 
Related to #7053, this uses the SSO config added in #7140 to enable JIT provisioning for premium instances.
 2022-08-15 14:42:33 -03:00
dependabot[bot]andTomas Touceda 6f0e0873ca Bump golang from 1.18.4-bullseye to 1.19.0-bullseye (#7039) 
* Bump golang from 1.18.4-bullseye to 1.19.0-bullseye

Bumps golang from 1.18.4-bullseye to 1.19.0-bullseye.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update other golang deps as well

* Update missing go mods

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
 2022-08-10 17:00:01 -03:00
Lucas Manuel Rodriguez 0d255d2252 Amend dependabot branch format (#7148) 2022-08-10 16:14:28 -03:00
dependabot[bot] 56ea9ee1b3 Bump dawidd6/action-download-artifact from 2.21.1 to 2.22.0 (#7132) 
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 2.21.1 to 2.22.0.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/6765a42d86407a3d532749069ac03705ad82ebc6...ea71f332a90fd52416b1629b933dcf7e0ccd421d)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-08-09 16:02:11 -03:00
Roberto Dip bfd98557f9 update golangci-lint version (#7115) 2022-08-09 15:42:35 -03:00
Roberto Dip e40c5b02c1 lock Docker version to 4.10.0 on macOS runners (#7082) 
The macOS runners installing Docker are having problems initializing the new Docker version (4.11.0) which effectively blocks PRs with Go code.

This locks the Docker version we install to 4.10.0, which works until we figure out a solution or a new Docker version goes out.
 2022-08-05 14:21:54 -03:00
dependabot[bot] a8a41fce31 Bump github/codeql-action from 2.1.16 to 2.1.17 (#6952) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.16 to 2.1.17.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/3e7e3b32d0fb8283594bb0a76cc60a00918b0969...0c670bbf0414f39666df6ce8e718ec5662c21e03)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-08-02 09:18:44 -03:00
Zach Wasserman b3a575b023 Remove semgrep from Actions (#6847) 
Sadly, this never saw the love it needed to bring value. No opposition
to bringing it back later, but removing it for now.
 2022-07-25 10:53:06 -07:00
dependabot[bot] 90e3838134 Bump returntocorp/semgrep-action (#6828) 
Bumps [returntocorp/semgrep-action](https://github.com/returntocorp/semgrep-action) from 1c1ab0c45ee0495c4ce90cee74ee548e177e054b to 1. This release includes the previously tagged commit.
- [Release notes](https://github.com/returntocorp/semgrep-action/releases)
- [Changelog](https://github.com/returntocorp/semgrep-action/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/returntocorp/semgrep-action/compare/1c1ab0c45ee0495c4ce90cee74ee548e177e054b...ec5cff38679b57ff4c6fc65a3e73601e574aa0e7)

---
updated-dependencies:
- dependency-name: returntocorp/semgrep-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-07-25 08:45:15 -07:00
dependabot[bot] ff2afa8be0 Bump returntocorp/semgrep-action (#6483) 
Bumps [returntocorp/semgrep-action](https://github.com/returntocorp/semgrep-action) from 177d02a2d1c3f89e977083f7d979dc946b12323d to 1. This release includes the previously tagged commit.
- [Release notes](https://github.com/returntocorp/semgrep-action/releases)
- [Changelog](https://github.com/returntocorp/semgrep-action/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/returntocorp/semgrep-action/compare/177d02a2d1c3f89e977083f7d979dc946b12323d...1c1ab0c45ee0495c4ce90cee74ee548e177e054b)

---
updated-dependencies:
- dependency-name: returntocorp/semgrep-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-07-21 18:47:13 -07:00
Eric 47a80ad483 Update deploy fleet website to run when an article has been updated (#6545) 2022-07-21 19:01:43 -05:00
Robert Fairburn 126fedfcd3 Allow VPN Access into Dogfood (#6805) 2022-07-21 13:38:50 -05:00
Zach Wasserman a87736de5d Bump Fleet Desktop version to 1.0.0 (#6691) 2022-07-19 08:01:28 -03:00
Lucas Manuel Rodriguez 2d3fff7f59 Do not use deprecated macos-10.15 runner (#6724) 2022-07-19 08:00:27 -03:00
Zach Wasserman c9d173e974 Make targets for osquery 5.4.0 (#6536) 2022-07-18 14:25:55 -03:00
dependabot[bot] ec31f523eb Bump actions/setup-go from 3.2.0 to 3.2.1 (#6590) 
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.2.0 to 3.2.1.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/b22fbbc2921299758641fab08929b4ac52b32923...84cbf8094393cdc5fe1fe1671ff2647332956b1a)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-07-18 14:24:51 -03:00
dependabot[bot] f30a31012e Bump github/codeql-action from 2.1.15 to 2.1.16 (#6646) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.15 to 2.1.16.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/3f62b754e23e0dd60f91b744033e1dc1654c0ec6...3e7e3b32d0fb8283594bb0a76cc60a00918b0969)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-07-18 14:23:31 -03:00
Roberto Dip 86366b2ed8 add a new S3 datastore to retrieve pre-built packages (#6631) 
Related to #6365, this extends the datastore/s3 package to retrieve installers from S3 according to the conventions listed in the parent issue. This also includes:

- A minor refactor to decouple Carves-related functionality from the core S3 functionality
- Set-up to run tests using minio (only enabled via the FILE_STORAGE_TEST env flag)
 2022-07-14 14:14:24 -03:00
Benjamin Edwards dc40c80e2e add tf vars for cloudwatch log retention & rds snapshot backup retention (#6532) 
* add tf vars for cloudwatch log retention & rds snapshot backup retention, update github workflow to deploy new dogfood configurations for new tf vars

* typo and tf fmt
 2022-07-11 15:30:36 -04:00
dependabot[bot]andTomas Touceda b26a5cdb4e Bump github.com/open-policy-agent/opa from 0.40.0 to 0.42.0 (#6537) 
* Bump github.com/open-policy-agent/opa from 0.40.0 to 0.42.0

Bumps [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) from 0.40.0 to 0.42.0.
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-policy-agent/opa/compare/v0.40.0...v0.42.0)

---
updated-dependencies:
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Include go.* files in tests

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tomas Touceda <chiiph@gmail.com>
 2022-07-11 14:58:27 -03:00
Roberto Dip 78fbf4c35a tag fleetdm/fleetctl docker image before pushing to Hub (#6585) 2022-07-11 14:57:54 -03:00
Roberto Dip 6a1724a474 add a workflow to build and push fleetdm/fleetctl images (#6533) 2022-07-11 10:32:40 -03:00
Roberto Dip f7dd8c86cd implement a docker image to package orbit natively in Linux (#6504) 
Related to #6364 and #6363, this:

- Adds a new Docker image, `fleetdm/fleetctl` equipped with all necessary dependencies to build Fleet-osquery binaries for all platforms
- Modifies the package generation logic to special case this scenario via an environment variable `FLEETCTL_NATIVE_TOOLING`
- Adds a new GitHub workflow to test this

There are more details in the README, but part of the special-casing logic is in place to output the binaries to a folder named `build` when they are run with `FLEETCTL_NATIVE_TOOLING`, this is so we can persist the binary generated by the docker container via a bind mount:

```bash
docker run -v "$(pwd):/build" fleetdm/fleetctl package --type=msi
```

To test this changeset, I have generated packages for all platforms, both via the new Docker image and via the classic `fleetctl package`.
 2022-07-11 09:49:13 -03:00
Lucas Manuel Rodriguez a336ed61e5 Add gotestfmt to improve test output and fix flaky tests (#6528) 2022-07-11 08:12:33 -03:00
Lucas Manuel Rodriguez e92ea532b6 Orbit to cleanup extension socket at startup (#6474) 
* Orbit to cleanup extension socket at startup

* Remove extra quote
 2022-07-01 16:56:37 -03:00
dependabot[bot] 3da9f6cb38 Bump ossf/scorecard-action from 1.0.4 to 1.1.2 (#6419) 
Bumps [ossf/scorecard-action](https://github.com/ossf/scorecard-action) from 1.0.4 to 1.1.2.
- [Release notes](https://github.com/ossf/scorecard-action/releases)
- [Changelog](https://github.com/ossf/scorecard-action/blob/main/RELEASE.md)
- [Commits](https://github.com/ossf/scorecard-action/compare/c1aec4ac820532bab364f02a81873c555a0ba3a1...ce330fde6b1a5c9c75b417e7efc510b822a35564)

---
updated-dependencies:
- dependency-name: ossf/scorecard-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-06-28 18:31:37 -07:00
dependabot[bot] 985eccc442 Bump dawidd6/action-download-artifact from 2.19.0 to 2.21.1 (#6418) 
Bumps [dawidd6/action-download-artifact](https://github.com/dawidd6/action-download-artifact) from 2.19.0 to 2.21.1.
- [Release notes](https://github.com/dawidd6/action-download-artifact/releases)
- [Commits](https://github.com/dawidd6/action-download-artifact/compare/b2abf1705491048a2d7074f7d90513044fd25d39...6765a42d86407a3d532749069ac03705ad82ebc6)

---
updated-dependencies:
- dependency-name: dawidd6/action-download-artifact
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-06-28 18:31:16 -07:00
dependabot[bot] 690595f9b3 Bump returntocorp/semgrep-action (#6417) 
Bumps [returntocorp/semgrep-action](https://github.com/returntocorp/semgrep-action) from 619fcfc626fd7b93e0f350c46e67671f2c962265 to 1. This release includes the previously tagged commit.
- [Release notes](https://github.com/returntocorp/semgrep-action/releases)
- [Changelog](https://github.com/returntocorp/semgrep-action/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/returntocorp/semgrep-action/compare/619fcfc626fd7b93e0f350c46e67671f2c962265...177d02a2d1c3f89e977083f7d979dc946b12323d)

---
updated-dependencies:
- dependency-name: returntocorp/semgrep-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-06-28 18:30:50 -07:00
dependabot[bot] c160588ef3 Bump aws-actions/amazon-ecr-login from 1.3.3 to 1.5.0 (#6404) 
Bumps [aws-actions/amazon-ecr-login](https://github.com/aws-actions/amazon-ecr-login) from 1.3.3 to 1.5.0.
- [Release notes](https://github.com/aws-actions/amazon-ecr-login/releases)
- [Changelog](https://github.com/aws-actions/amazon-ecr-login/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws-actions/amazon-ecr-login/compare/aaf69d68aa3fb14c1d5a6be9ac61fe15b48453a2...b874a33292cc9887d2e80bc63f6f1a11fccb4a7b)

---
updated-dependencies:
- dependency-name: aws-actions/amazon-ecr-login
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-06-28 18:30:25 -07:00
dependabot[bot] 314afc694b Bump tfsec/tfsec-sarif-action from 0.1.0 to 0.1.3 (#6415) 
Bumps [tfsec/tfsec-sarif-action](https://github.com/tfsec/tfsec-sarif-action) from 0.1.0 to 0.1.3.
- [Release notes](https://github.com/tfsec/tfsec-sarif-action/releases)
- [Commits](https://github.com/tfsec/tfsec-sarif-action/compare/56bc584a8377626a31e511056772298ccfa69501...5d34a982aa8927c5dd8566d25ef248d526aac1f4)

---
updated-dependencies:
- dependency-name: tfsec/tfsec-sarif-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-06-28 18:29:11 -07:00
dependabot[bot] 39192a2b89 Bump docker/login-action from 1.14.1 to 2 (#5598) 
Bumps [docker/login-action](https://github.com/docker/login-action) from 1.14.1 to 2.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/dd4fa0671be5250ee6f50aedf4cb05514abda2c7...49ed152c8eca782a232dede0303416e8f356c37b)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-06-28 18:27:48 -07:00
dependabot[bot] c90b4b8d50 Bump github/codeql-action from 2.1.11 to 2.1.15 (#6416) 
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 2.1.11 to 2.1.15.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/a3a6c128d771b6b9bdebb1c9d0583ebd2728a108...3f62b754e23e0dd60f91b744033e1dc1654c0ec6)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-06-28 18:26:55 -07:00
dependabot[bot] 15873bfbe2 Bump codecov/codecov-action from 3.0.0 to 3.1.0 (#5310) 
Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/master/CHANGELOG.md)
- [Commits](https://github.com/codecov/codecov-action/compare/e3c560433a6cc60aec8812599b7844a7b4fa0d71...81cd2dc8148241f03f5839d295e000b8f761e378)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-06-28 18:26:00 -07:00
dependabot[bot] d317b2792c Bump returntocorp/semgrep-action (#5309) 
Bumps [returntocorp/semgrep-action](https://github.com/returntocorp/semgrep-action) from a9f6c903be5b9bc982d6be6f9312146daa4964b5 to 1. This release includes the previously tagged commit.
- [Release notes](https://github.com/returntocorp/semgrep-action/releases)
- [Changelog](https://github.com/returntocorp/semgrep-action/blob/develop/CHANGELOG.md)
- [Commits](https://github.com/returntocorp/semgrep-action/compare/a9f6c903be5b9bc982d6be6f9312146daa4964b5...619fcfc626fd7b93e0f350c46e67671f2c962265)

---
updated-dependencies:
- dependency-name: returntocorp/semgrep-action
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2022-06-28 18:25:28 -07:00