 stepsecurity-app[bot]
|
2a077cae5e
|
feat(security): security best practices from StepSecurity (#11937)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-07-10 09:00:40 +02:00 |
|
|
César Arroba
|
9d899ae0e2
|
ci: rename public ECR push-role secret to PUBLIC_ECR_PUSH_ROLE_ARN (#11916)
|
2026-07-09 11:27:55 +02:00 |
|
|
renovate[bot]
|
ce80fcd430
|
chore(ci): update github-actions (#11314)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
2026-07-02 09:08:16 +02:00 |
|
|
César Arroba
|
9a9cbc997b
|
ci(workflows): push SDK image to Public ECR via OIDC (#11749)
|
2026-06-30 21:17:57 +02:00 |
|
|
dependabot[bot]
|
c660b35ed6
|
chore(deps): bump step-security/harden-runner from 2.19.1 to 2.19.3 (#11267)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 09:33:57 +02:00 |
|
|
dependabot[bot]
|
a55a736363
|
chore(deps): bump docker/login-action from 4.0.0 to 4.1.0 (#10748)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 09:04:28 +02:00 |
|
|
dependabot[bot]
|
e7fbc8b391
|
chore(deps): bump docker/build-push-action from 7.0.0 to 7.1.0 (#10738)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 08:54:03 +02:00 |
|
|
dependabot[bot]
|
6ef70484c7
|
chore(deps): bump step-security/harden-runner from 2.16.0 to 2.19.1 (#10953)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-05-21 08:32:05 +02:00 |
|
|
Pedro Martín
|
5cbe473eb9
|
chore(stepsecurity): add missing endpoints (#11223)
|
2026-05-19 16:07:33 +02:00 |
|
|
Adrián Peña
|
7d3ed62e90
|
chore(sdk): migrate from poetry to uv (#11162)
|
2026-05-14 12:51:57 +02:00 |
|
|
César Arroba
|
98277689f5
|
ci: reduce GitHub Actions consumption across CI workflows (#11007)
|
2026-05-05 17:08:34 +02:00 |
|
|
César Arroba
|
ca79300440
|
fix(ci): poetry cache post-step failure on release workflows (#10881)
|
2026-04-24 11:57:30 +02:00 |
|
|
stepsecurity-app[bot]
|
96e7d6cb3a
|
feat(security): security best practices from StepSecurity (#10682)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-04-14 15:13:12 +02:00 |
|
|
Josema Camacho
|
51591cb8cd
|
build: bump poetry to 2.3.4 and consolidate SDK workflows (#10681)
|
2026-04-14 13:32:46 +02:00 |
|
|
dependabot[bot]
|
f3b142c0cf
|
chore(deps): bump docker/login-action from 3.7.0 to 4.0.0 (#10554)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-09 10:19:00 +02:00 |
|
|
dependabot[bot]
|
def59a8cc2
|
chore(deps): bump docker/setup-buildx-action from 3.12.0 to 4.0.0 (#10556)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-09 10:16:00 +02:00 |
|
|
dependabot[bot]
|
1bfed74db5
|
chore(deps): bump docker/build-push-action from 6.19.2 to 7.0.0 (#10557)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-04-09 10:14:27 +02:00 |
|
|
César Arroba
|
6f6d62f51f
|
fix(ci): remove DOCKER_HUB_REPOSITORY secret and add toniblyx mirror push (#10512)
|
2026-03-30 11:53:04 +02:00 |
|
|
César Arroba
|
de492a770c
|
fix(ci): remove DOCKER_HUB_REPOSITORY secret from sdk container workflow (#10509)
|
2026-03-30 10:20:38 +02:00 |
|
|
César Arroba
|
e9009f783b
|
fix(ci): remove setup-buildx-action from create-manifest jobs (#10508)
|
2026-03-30 10:01:32 +02:00 |
|
|
Pepe Fagoaga
|
417be55604
|
feat(security): block mode for hardened runners (#10482)
|
2026-03-27 13:08:59 +01:00 |
|
|
stepsecurity-app[bot]
|
716c130140
|
feat(security): security best practices from StepSecurity (#10480)
Signed-off-by: StepSecurity Bot <bot@stepsecurity.io>
Co-authored-by: stepsecurity-app[bot] <188008098+stepsecurity-app[bot]@users.noreply.github.com>
Co-authored-by: Pepe Fagoaga <pepe@prowler.com>
|
2026-03-26 13:58:19 +01:00 |
|
|
dependabot[bot]
|
41a7b19c7d
|
build(deps): bump actions/checkout from 6.0.1 to 6.0.2 (#9936)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:46:40 +01:00 |
|
|
dependabot[bot]
|
27d074abe4
|
build(deps): bump actions/setup-python from 5.3.0 to 6.2.0 (#9932)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:44:28 +01:00 |
|
|
dependabot[bot]
|
28060064de
|
build(deps): bump docker/login-action from 3.6.0 to 3.7.0 (#9931)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:41:34 +01:00 |
|
|
dependabot[bot]
|
a6d47bdb2b
|
build(deps): bump docker/build-push-action from 6.18.0 to 6.19.2 (#10201)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-03-13 09:39:43 +01:00 |
|
|
Pepe Fagoaga
|
7adcbed727
|
fix(ci): zizmor security improvements (#10207)
|
2026-03-02 08:24:51 +01:00 |
|
|
Andoni Alonso
|
8be218b29f
|
fix(ci): harden GitHub Actions workflows against expression injection (#10200)
|
2026-03-01 19:58:43 +01:00 |
|
|
dependabot[bot]
|
64c9dd4947
|
build(deps): bump docker/login-action from 3.4.0 to 3.6.0 (#9396)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-01-08 12:54:03 +01:00 |
|
|
dependabot[bot]
|
8b2dea52fa
|
build(deps): bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#9709)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2026-01-08 12:52:42 +01:00 |
|
|
César Arroba
|
942177ae59
|
chore(github): fix sdk container build pipeline (#9689)
|
2025-12-24 10:03:28 +01:00 |
|
|
dependabot[bot]
|
deada62d66
|
build(deps): bump peter-evans/repository-dispatch from 4.0.0 to 4.0.1 (#9391)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-12-23 09:50:36 +01:00 |
|
|
dependabot[bot]
|
ca9211b5ed
|
build(deps): bump actions/setup-python from 6.0.0 to 6.1.0 (#9390)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-12-23 09:26:54 +01:00 |
|
|
dependabot[bot]
|
3cf7f7845e
|
build(deps): bump actions/checkout from 5.0.0 to 6.0.0 (#9397)
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
|
2025-12-23 09:20:19 +01:00 |
|
|
César Arroba
|
7b56f0640f
|
chore(github): fix release messages (#9459)
|
2025-12-09 10:06:55 +01:00 |
|
|
César Arroba
|
7b1915e489
|
chore(github): update message when contaienr is pushed (#9421)
|
2025-12-03 10:53:01 +01:00 |
|
|
César Arroba
|
e58574e2a4
|
chore(github): fix container actions (#9321)
|
2025-11-26 10:16:26 +01:00 |
|
|
César Arroba
|
6e7266eacf
|
chore(github): fix sdk build action (#9288)
|
2025-11-21 11:03:52 +01:00 |
|
|
Paco Sanchez Lopez
|
1ea0dabf42
|
feat(arm): adds support building multiarch prowler containers (#8773)
Co-authored-by: Andoni A. <14891798+andoniaf@users.noreply.github.com>
|
2025-11-17 12:35:33 +01:00 |
|
|
César Arroba
|
a452c8c3eb
|
chore(github): send slack message on container release (#9089)
|
2025-10-30 13:20:54 +01:00 |
|
|
César Arroba
|
e9e0797642
|
chore(github): improve container actions (#9061)
|
2025-10-29 12:42:53 +01:00 |
|
|
César Arroba
|
0a2749b716
|
chore(github): improve SDK container build and push action (#9034)
|
2025-10-29 12:00:15 +01:00 |
|