Commit graph

80 commits

Author SHA1 Message Date
Mick Grove
5b51aa941d fixed github actions 2026-03-28 12:09:28 -07:00
Mick Grove
af66acd18d fixed github actions 2026-03-28 11:59:22 -07:00
Mick Grove
6f9e3a05ae fixed github actions 2026-03-28 11:48:13 -07:00
Mick Grove
31042d4784 updated in response to ossf scorecard 2026-03-27 14:28:53 -07:00
Mick Grove
3e0569d741 improve OpenSSF scorecard: tighten token permissions and add build provenance
Move write permissions from workflow top-level to job-level in cflite_batch,
cflite_pr, and release-docker workflows. Add sigstore build provenance
attestation to the release workflow via actions/attest-build-provenance.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-26 19:36:18 -07:00
Mick Grove
d609900d56 updated dependencies 2026-03-24 08:55:34 -07:00
Mick Grove
e2c7dc3e41 openssf scorecard suggested improvements 2026-03-20 09:25:05 -07:00
Mick Grove
db97997521 openssf scorecard suggested improvements 2026-03-20 08:41:37 -07:00
Mick Grove
bd2d53b7b4 openssf scorecard suggested improvements 2026-03-20 07:45:37 -07:00
Mick Grove
5fa4ce59b7 openssf scorecard suggested improvements
Made-with: Cursor
2026-03-19 23:39:36 -07:00
Mick Grove
d637a7b6fb openssf scorecard suggested improvements 2026-03-19 20:45:58 -07:00
Mick Grove
66055953a0 openssf scorecard suggested improvements 2026-03-19 20:31:10 -07:00
Mick Grove
6c32e374c3 openssf scorecard suggested improvements 2026-03-19 20:14:35 -07:00
Mick Grove
02a314529e v1.87.0 2026-03-09 21:50:06 -07:00
Mick Grove
283e9d29b3 fixed CI to not upload bare checksum, because they are included in zip file 2026-03-06 12:06:12 -08:00
Mick Grove
02f235995b v1.86.0 2026-03-06 09:02:11 -08:00
Mick Grove
e1c0702d3c v1.86.0 2026-03-06 08:28:28 -08:00
Mick Grove
11df7a4a8b v1.86.0 2026-03-05 23:09:54 -08:00
Mick Grove
a0b979d3f8 v1.86.0 2026-03-05 22:50:11 -08:00
Mick Grove
2527438e25 v1.86.0 2026-03-05 22:08:11 -08:00
Mick Grove
d89bdb868f v1.86.0 2026-03-05 20:50:48 -08:00
Mick Grove
0bf066491a v1.86.0 2026-03-05 20:36:27 -08:00
Mick Grove
ea0f6ba834
Merge pull request #238 from hamirmahal/fix/around-20-warnings-in-release-workflow
fix: around 20 warnings in release workflow
2026-02-17 08:27:26 -08:00
Hamir
1e06504477
fix: around 20 set-output command warnings 2026-02-16 15:15:04 -08:00
Hamir
2afb747872
chore: changes from formatting on save 2026-02-16 15:14:35 -08:00
Mick Grove
0ddf3fc10f Fixes in response to PR review 2026-02-16 07:34:32 -08:00
Mick Grove
39a4e217e3 Kingfisher can now generate an auditor-friendly HTML report 2026-02-15 14:29:42 -08:00
Mick Grove
cfc01eab68 Fixed CI runner failure when executing tests 2026-02-13 09:19:02 -08:00
Mick Grove
0ba79df1f4 Fixed CI runner failure when executing tests 2026-02-13 08:40:04 -08:00
Mick Grove
0c9ca048ea Fixed CI runner failure when executing tests 2026-02-13 07:55:17 -08:00
Mick Grove
dfa4375152 Fixed CI runner failure when executing tests 2026-02-12 21:46:17 -08:00
Mick Grove
20a05a643c Fixed CI runner failure when executing tests 2026-02-12 21:11:50 -08:00
Mick Grove
1a8651ecb0 Fixed CI runner failure when executing tests 2026-02-12 17:26:28 -08:00
Mick Grove
1503b4f661 Fixed CI runner failure when executing tests 2026-02-12 17:25:49 -08:00
Mick Grove
6a9a3b35ed Fixed CI runner failure when executing tests 2026-02-12 17:23:03 -08:00
Mick Grove
e72f40b169 Fixed CI runner failure when executing tests 2026-02-12 16:51:55 -08:00
Mick Grove
dfe6554b1c Fixed CI runner failure when executing tests 2026-02-12 16:07:55 -08:00
Mick Grove
60c72292c7 Added optional validation rate limiting via --validation-rps (global) and repeatable --validation-rps-rule <RULE_SELECTOR=RPS> (per-rule override) for both scan and validate. Throttling now applies across built-in validator types (HTTP/gRPC plus AWS, GCP, Coinbase, MongoDB, Postgres, MySQL, JDBC, JWT, and Azure Storage). Rule selectors support the short form (for example, github=2 matches kingfisher.github.*) with longest-prefix precedence when multiple selectors apply. 2026-02-12 13:15:51 -08:00
Mick Grove
5882468177 Added optional validation rate limiting via --validation-rps (global) and repeatable --validation-rps-rule <RULE_SELECTOR=RPS> (per-rule override) for both scan and validate. Throttling now applies across built-in validator types (HTTP/gRPC plus AWS, GCP, Coinbase, MongoDB, Postgres, MySQL, JDBC, JWT, and Azure Storage). Rule selectors support the short form (for example, github=2 matches kingfisher.github.*) with longest-prefix precedence when multiple selectors apply. 2026-02-12 12:33:59 -08:00
Mick Grove
4a74e95756 v1.81.0 2026-02-10 19:43:34 -08:00
Mick Grove
124b3eb014 Fixed PyPi github action 2026-02-07 08:58:06 -08:00
Mick Grove
77d951da1a Fixed issues in response to code review 2026-02-06 21:09:51 -08:00
Mick Grove
3294b2baf7 initial support for distribution via pypi wheels 2026-02-04 12:43:13 -08:00
Mick Grove
301c656f38 Fix build issues 2026-02-02 08:17:41 -08:00
Mick Grove
bcf3e278a1 preparing v1.74.0 2026-01-13 18:08:46 -08:00
Mick Grove
f4fc395554 preparing v1.74.0 2026-01-13 17:08:21 -08:00
Mick Grove
4f18541cb6 preparing v1.74.0 2026-01-12 22:50:05 -08:00
Mick Grove
08cccfd6ef v1.73.0 2026-01-02 12:49:58 -08:00
Mick Grove
c66069fe4b - Map SARIF result levels from rule confidence
- Added tag selection support to the bash and PowerShell install scripts.
2025-12-22 09:45:58 -08:00
Mick Grove
7f0d7b11ee updated ci build 2025-12-22 09:04:25 -08:00