1
0
mirror of https://github.com/bitwarden/server.git synced 2025-06-07 11:40:31 -05:00

363 Commits

Author SHA1 Message Date
aj-bw
25d5efacd8
set 0 when workflow is not ran (#5910) 2025-06-05 14:32:40 -04:00
aj-bw
6411cc63ca
BRE-875/server-builds-intermittently-failing-after-introducing-build-cache (#5909)
* increase logging

* remove caching for troubleshooting

* test max parallel of 3

* up parallel

* test removing cache again

* add permissions read

* edit permissions
2025-06-03 12:40:46 -04:00
tangowithfoxtrot
20105b85aa
fix: failing builds; Setup is no longer a dll (#5901) 2025-05-30 13:28:16 -07:00
tangowithfoxtrot
63f5811aa9
feat: non-root self hosted images for standard deployment (#5701)
* Use IHttpMessageHandlerFactory For HTTP Communication

Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>

* feat: allow custom app-id.json location for rootless

Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>

* fix: new build context wont allow copying git context

* feat: allow images to run as non-root user

* fix: build failures caused by bad merge

* build: we don't need to copy the `.git` dir

* Revert "build: we don't need to copy the `.git` dir"

This reverts commit 32c2f6236a894534de09ffe847ffff064a7174bd.

* Use `IHttpClientFactory` in more places

* update build workflow

* fix: compatibility with the existin run.sh script

* fix: compatibility with existing run.sh script

* Add SelfHosted GlobalSettings for Setup

* Fix my build error

* Add other services

* Add IConfiguration

* fix: missing gosu command for rootful mode

* fix: try using .net core certificate handling

* fix: add `SSL_CERT_DIR` to remaining images

* Remove X509ChainCustomization activation code

* Revert "Use IHttpMessageHandlerFactory For HTTP Communication"

This reverts commit c93be6d52b12599040d3c3d8a7b3bc854c6c6802.

* Revert "fix: build failures caused by bad merge"

This reverts commit 3e4639489b6b6c06b5a977a069002fe0c0eb2057.

* Revert "Use `IHttpClientFactory` in more places"

This reverts commit 284501a4932b819b093406e0bcdf76def22b6eea.

* remove unused code

* re-add error log for installation id

* remove missing error message in log

* build: remove duplicate docker+qemu setup steps

Co-authored-by: Opeyemi <Alaoopeyemi101@gmail.com>

* build: optimize for simpler builds over caching

* build: restore previous method for getting the GIT_HASH

* fix: add missing build args to remaining images

* fix: rm extraneous source revision id arg

* fmt: apply consistent spacing and rm redundant WORKDIR directive

* build: update migrator to use simpler build; apply consistent spacing

* fix: merge conflicts; simplify changes

* fix: add publish branch check back

---------

Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>
Co-authored-by: Opeyemi <Alaoopeyemi101@gmail.com>
2025-05-30 10:29:47 -07:00
aj-bw
1e7d02bca2
BRE-857/collect-code-references-fails-against-tags (#5885)
* update code-references file to also check tags

* fix line
2025-05-28 12:43:15 -04:00
Vince Grassia
3aa9812353
Fix actionlint issues (#5841) 2025-05-20 12:44:01 -04:00
aj-bw
a973a11d90
scan and build target updates (#5783) 2025-05-15 09:38:57 -04:00
Todd Martin
af08d4b2a5
chore(workflows): Update image tag logic to handle forked branches 2025-05-08 11:27:06 -04:00
Matt Bishop
9da98d8e97
Run LD reference check on all pushes (#5760)
* Run LD reference check on all pushes

* Fix syntax of code-references.yml

---------

Co-authored-by: Matt Andreko <mandreko@bitwarden.com>
2025-05-01 12:25:52 -07:00
Matt Bishop
706d7a5768
Migrate to new LD Action for code references (#5759) 2025-05-01 10:08:39 -07:00
MtnBurrit0
cb9d7e450f
Drop create_branch input, it's enabled by default. (#5634) 2025-04-10 10:44:31 -06:00
MtnBurrit0
8cd14d55dd
EE sync improvements (#5620)
* Leverage new workflow changes

* Refactor ephemeral-environment workflow

* Add .has_secrets check back into build
2025-04-09 09:44:42 -06:00
Daniel García
887332b436
[PM-15127] Remove secrets requirement from build workflow (#5546)
* [PM-15127] Remove secrets requirement from build workflow

* Remove unneeded check, fix target workflow

* Remove IF
2025-03-31 15:19:55 +02:00
Matt Andreko
229aecb55c
Update SARIF upload to use proper branch (#5534) 2025-03-24 14:20:42 -04:00
Matt Bishop
d40fbe3217
Upgrade test reporter (#5492) 2025-03-13 11:55:39 -04:00
Matt Andreko
29dc69a77b
Remove extra && (#5484) 2025-03-10 16:13:35 -04:00
Matt Andreko
8287d0a968
Replace secret checking logic with branch detection logic (#5454) 2025-03-10 15:57:56 -04:00
Justin Baur
0b6f0d9fe8
Collect Code Coverage In DB Tests (#5431) 2025-02-20 11:19:48 -05:00
rkac-bw
6cb00ebc8e
Add entity path to database test workflow (#5401)
* Add entity path to database test workflow

* Add entity path to pull request - path database test workflow

---------

Co-authored-by: Maciej Zieniuk <167752252+mzieniukbw@users.noreply.github.com>
2025-02-13 08:57:41 -07:00
Matt Andreko
d2fb3760d3
Reworked PR workflow logic to prevent missing parameter (#5367) 2025-02-04 13:53:16 -05:00
Matt Andreko
b5cfb4b9c7
Enabled SonarQube scanning for PRs (#5363)
* Added scan workflow parameter for PR number to enable branch scanning

* Added missing backslash
2025-02-04 12:14:55 -05:00
renovate[bot]
148a631178
[deps]: Update github/codeql-action action to v3.28.8 (#5292)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-31 15:59:39 +01:00
renovate[bot]
a9ef475046
[deps]: Update github-action minor (#5296)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-21 10:56:17 -08:00
Matt Andreko
d231070cac
Removed unnecessary CODECOV_TOKEN with updated codecov-action (#5271) 2025-01-15 14:16:18 -05:00
Matt Andreko
0645f51b65
Removed unnecessary github token (#5259) 2025-01-13 17:02:35 -05:00
MtnBurrit0
f753829559
Always update the ephemeral environment when the label is added (#5240) 2025-01-09 10:50:03 -07:00
Vince Grassia
28d5535010
Update checkout action for cherry pick job (#5242) 2025-01-09 18:33:52 +01:00
MtnBurrit0
bd657c76cf
Remove unused workflow now that config has been migrated. (#5239) 2025-01-09 17:10:49 +00:00
renovate[bot]
f265911526
[deps] BRE: Update gh minor (#5016)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-09 10:09:55 +01:00
Patrick-Pimentel-Bitwarden
cc96e35072
Auth/pm 2996/add auth request data to devices response model (#5152)
fix(auth): [PM-2996] Add Pending Auth Request Data to Devices Response
- New stored procedure to fetch the appropriate data.
- Updated devices controller to respond with the new data.
- Tests written at the controller and repository level.
Resolves PM-2996
2025-01-07 15:52:53 -05:00
renovate[bot]
066cd4655d
[deps] BRE: Update codecov/codecov-action action to v5 (#5071)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-03 17:33:57 -05:00
renovate[bot]
4b2030de77
[deps] BRE: Update anchore/scan-action action to v6 (#5180)
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-03 11:35:28 -05:00
MtnBurrit0
840ff00189
BRE-292: Sync ephemeral environment with GH workflow (#5174)
* Add sync_environment call

* Put callable workflow in it's own job

* Switch to context for GitHub input

* Set requirements and inherit secrets

* Add the condition to the job

* Update .github/workflows/build.yml

Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>

---------

Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>
2025-01-02 13:58:32 -07:00
Vince Grassia
144c0a2fee
Add missing curly brace (#5203) 2024-12-31 10:49:52 -08:00
Michał Chęciński
16488091d2
Remove is_workflow_call input from build workflow (#5161) 2024-12-17 10:45:02 -05:00
Opeyemi
d0c72a34f1
Update SH Unified Build trigger (#5154)
* Update SH Unified Build trigger

* make value a boolean
2024-12-16 15:21:05 +01:00
Matt Bishop
c0a9c55891
Fix image path formation for Cosign (#5151) 2024-12-13 10:26:45 -05:00
Matt Bishop
11bdb93d1e
Sign main branch container builds with cosign (#5148)
* Sign main branch container builds with cosign

* Properly label
2024-12-13 09:41:17 -05:00
Michał Chęciński
470a12640e
Trigger unified build on rc and hotfix-rc branches (#5108) 2024-12-04 13:18:58 +00:00
Michał Chęciński
8b1b07884e
Fix github token generating in repository-management.yml workflow (#5038) 2024-11-14 13:47:37 +01:00
Matt Bishop
eec4a77bda
Check run earlier during setup (#5022) 2024-11-11 13:19:20 -05:00
Alex Urbina
89be2f495a
Fix Hackerone Report ID 2830741 (#5010) 2024-11-08 20:41:58 +00:00
MtnBurrit0
a56f3a587c
Update logic to handle pull_request_target (#5008)
- Removing the grep and create a conditional based on GITHUB_EVENT_NAME
2024-11-08 11:58:07 -07:00
Matt Bishop
e7cbdaa469
Only build Unified on main branch pushes (#5006) 2024-11-08 10:31:18 -05:00
Matt Bishop
fcb706b9c5
Catch PR targets for certain build operations (#5003)
* Catch PR targets for certain build operations

* Support EE
2024-11-07 17:11:01 -05:00
Matt Bishop
f7957f7053
Check run permissions for secrets usage (#4992) 2024-11-07 09:56:57 -05:00
Justin Baur
b5014ed6d8
Add MariaDB test (#4989)
* Add MariaDB Test

* Use Correct Syntax

* Use Container Name

* Add Port

* Remove MySQL Thing

* Remove Another Thing

* Different Port Syntax

* Add Back Skipped Checks

* Use Correct Connection String in Test Setup

* Update .github/workflows/test-database.yml

Co-authored-by: Matt Bishop <mbishop@bitwarden.com>

* Update .github/workflows/test-database.yml

Co-authored-by: Matt Bishop <mbishop@bitwarden.com>

* Use MariaDB 10

---------

Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
2024-11-06 21:51:10 +00:00
Matt Bishop
e7bd31c009
Check for secrets on Docker builds (#4985) 2024-11-06 13:56:12 -05:00
Matt Bishop
d63e18ec7a
Check for secrets on database test report upload (#4984) 2024-11-06 11:38:25 -05:00
Vince Grassia
fded36c999
Add version bump task (#4976) 2024-11-05 11:47:58 -05:00