Tidy up CI#147
Merged
Merged
Conversation
There was a problem hiding this comment.
Pull request overview
Updates CI/build tooling to use pinned artifact versions and add checksum verification to reduce supply-chain risk and improve reproducibility.
Changes:
- Pin dapper download to
v0.6.0and add SHA-512 checksum validation in theMakefile. - Ensure the dapper image has Buildx support and add checksum verification for envtest binaries.
- Switch packaging script to use
docker buildxinvocation.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated 2 comments.
| File | Description |
|---|---|
scripts/package |
Uses docker buildx build for image packaging. |
Makefile |
Pins dapper version and validates downloads via SHA-512 checksums. |
Dockerfile.dapper |
Installs Buildx via package manager; pins golangci-lint; validates envtest tarball checksum. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
w13915984028
previously approved these changes
Mar 30, 2026
... to ensure pinned versions of artifacts are used and checksum validation is performed where needed. Related to: rancher/rancher-security#1533 Signed-off-by: Volker Theile <vtheile@suse.com>
Member
Author
|
@Mergifyio backport v1.8 |
✅ Backports have been createdDetails
|
mergify Bot
pushed a commit
that referenced
this pull request
Mar 31, 2026
... to ensure pinned versions of artifacts are used and checksum validation is performed where needed. Related to: https://github.com/rancher/rancher-security/issues/1533 Signed-off-by: Volker Theile <vtheile@suse.com> (cherry picked from commit de2dc16)
votdev
added a commit
that referenced
this pull request
Mar 31, 2026
... to ensure pinned versions of artifacts are used and checksum validation is performed where needed. Related to: rancher/rancher-security#1533 Signed-off-by: Volker Theile <vtheile@suse.com> (cherry picked from commit de2dc16)
votdev
added a commit
that referenced
this pull request
Mar 31, 2026
... to ensure pinned versions of artifacts are used and checksum validation is performed where needed. Related to: https://github.com/rancher/rancher-security/issues/1533 (cherry picked from commit de2dc16) Signed-off-by: Volker Theile <vtheile@suse.com> Co-authored-by: Volker Theile <vtheile@suse.com>
Contributor
|
@Mergifyio backport v1.7 |
✅ Backports have been createdDetails
Cherry-pick of de2dc16 has failed: To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally |
Vicente-Cheng
pushed a commit
that referenced
this pull request
May 4, 2026
... to ensure pinned versions of artifacts are used and checksum validation is performed where needed. Related to: rancher/rancher-security#1533 Signed-off-by: Volker Theile <vtheile@suse.com> (cherry picked from commit de2dc16)
Vicente-Cheng
pushed a commit
that referenced
this pull request
May 4, 2026
... to ensure pinned versions of artifacts are used and checksum validation is performed where needed. Related to: rancher/rancher-security#1533 Signed-off-by: Volker Theile <vtheile@suse.com> (cherry picked from commit de2dc16)
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
... to ensure pinned versions of artifacts are used and checksum validation is performed where needed.
Related Issue:
https://github.com/rancher/rancher-security/issues/1533