aj-bw
25d5efacd8
set 0 when workflow is not ran ( #5910 )
2025-06-05 14:32:40 -04:00
aj-bw
6411cc63ca
BRE-875/server-builds-intermittently-failing-after-introducing-build-cache ( #5909 )
...
* increase logging
* remove caching for troubleshooting
* test max parallel of 3
* up parallel
* test removing cache again
* add permissions read
* edit permissions
2025-06-03 12:40:46 -04:00
tangowithfoxtrot
20105b85aa
fix: failing builds; Setup is no longer a dll ( #5901 )
2025-05-30 13:28:16 -07:00
tangowithfoxtrot
63f5811aa9
feat: non-root self hosted images for standard deployment ( #5701 )
...
* Use IHttpMessageHandlerFactory For HTTP Communication
Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>
* feat: allow custom app-id.json location for rootless
Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>
* fix: new build context wont allow copying git context
* feat: allow images to run as non-root user
* fix: build failures caused by bad merge
* build: we don't need to copy the `.git` dir
* Revert "build: we don't need to copy the `.git` dir"
This reverts commit 32c2f6236a894534de09ffe847ffff064a7174bd.
* Use `IHttpClientFactory` in more places
* update build workflow
* fix: compatibility with the existin run.sh script
* fix: compatibility with existing run.sh script
* Add SelfHosted GlobalSettings for Setup
* Fix my build error
* Add other services
* Add IConfiguration
* fix: missing gosu command for rootful mode
* fix: try using .net core certificate handling
* fix: add `SSL_CERT_DIR` to remaining images
* Remove X509ChainCustomization activation code
* Revert "Use IHttpMessageHandlerFactory For HTTP Communication"
This reverts commit c93be6d52b12599040d3c3d8a7b3bc854c6c6802.
* Revert "fix: build failures caused by bad merge"
This reverts commit 3e4639489b6b6c06b5a977a069002fe0c0eb2057.
* Revert "Use `IHttpClientFactory` in more places"
This reverts commit 284501a4932b819b093406e0bcdf76def22b6eea.
* remove unused code
* re-add error log for installation id
* remove missing error message in log
* build: remove duplicate docker+qemu setup steps
Co-authored-by: Opeyemi <Alaoopeyemi101@gmail.com>
* build: optimize for simpler builds over caching
* build: restore previous method for getting the GIT_HASH
* fix: add missing build args to remaining images
* fix: rm extraneous source revision id arg
* fmt: apply consistent spacing and rm redundant WORKDIR directive
* build: update migrator to use simpler build; apply consistent spacing
* fix: merge conflicts; simplify changes
* fix: add publish branch check back
---------
Co-authored-by: Justin Baur <19896123+justindbaur@users.noreply.github.com>
Co-authored-by: Opeyemi <Alaoopeyemi101@gmail.com>
2025-05-30 10:29:47 -07:00
aj-bw
1e7d02bca2
BRE-857/collect-code-references-fails-against-tags ( #5885 )
...
* update code-references file to also check tags
* fix line
2025-05-28 12:43:15 -04:00
Vince Grassia
3aa9812353
Fix actionlint issues ( #5841 )
2025-05-20 12:44:01 -04:00
aj-bw
a973a11d90
scan and build target updates ( #5783 )
2025-05-15 09:38:57 -04:00
Todd Martin
af08d4b2a5
chore(workflows): Update image tag logic to handle forked branches
2025-05-08 11:27:06 -04:00
Matt Bishop
9da98d8e97
Run LD reference check on all pushes ( #5760 )
...
* Run LD reference check on all pushes
* Fix syntax of code-references.yml
---------
Co-authored-by: Matt Andreko <mandreko@bitwarden.com>
2025-05-01 12:25:52 -07:00
Matt Bishop
706d7a5768
Migrate to new LD Action for code references ( #5759 )
2025-05-01 10:08:39 -07:00
MtnBurrit0
cb9d7e450f
Drop create_branch input, it's enabled by default. ( #5634 )
2025-04-10 10:44:31 -06:00
MtnBurrit0
8cd14d55dd
EE sync improvements ( #5620 )
...
* Leverage new workflow changes
* Refactor ephemeral-environment workflow
* Add .has_secrets check back into build
2025-04-09 09:44:42 -06:00
Daniel García
887332b436
[PM-15127] Remove secrets requirement from build workflow ( #5546 )
...
* [PM-15127] Remove secrets requirement from build workflow
* Remove unneeded check, fix target workflow
* Remove IF
2025-03-31 15:19:55 +02:00
Matt Andreko
229aecb55c
Update SARIF upload to use proper branch ( #5534 )
2025-03-24 14:20:42 -04:00
Matt Bishop
d40fbe3217
Upgrade test reporter ( #5492 )
2025-03-13 11:55:39 -04:00
Matt Andreko
29dc69a77b
Remove extra && ( #5484 )
2025-03-10 16:13:35 -04:00
Matt Andreko
8287d0a968
Replace secret checking logic with branch detection logic ( #5454 )
2025-03-10 15:57:56 -04:00
Justin Baur
0b6f0d9fe8
Collect Code Coverage In DB Tests ( #5431 )
2025-02-20 11:19:48 -05:00
rkac-bw
6cb00ebc8e
Add entity path to database test workflow ( #5401 )
...
* Add entity path to database test workflow
* Add entity path to pull request - path database test workflow
---------
Co-authored-by: Maciej Zieniuk <167752252+mzieniukbw@users.noreply.github.com>
2025-02-13 08:57:41 -07:00
Matt Andreko
d2fb3760d3
Reworked PR workflow logic to prevent missing parameter ( #5367 )
2025-02-04 13:53:16 -05:00
Matt Andreko
b5cfb4b9c7
Enabled SonarQube scanning for PRs ( #5363 )
...
* Added scan workflow parameter for PR number to enable branch scanning
* Added missing backslash
2025-02-04 12:14:55 -05:00
renovate[bot]
148a631178
[deps]: Update github/codeql-action action to v3.28.8 ( #5292 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-31 15:59:39 +01:00
renovate[bot]
a9ef475046
[deps]: Update github-action minor ( #5296 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-21 10:56:17 -08:00
Matt Andreko
d231070cac
Removed unnecessary CODECOV_TOKEN with updated codecov-action ( #5271 )
2025-01-15 14:16:18 -05:00
Matt Andreko
0645f51b65
Removed unnecessary github token ( #5259 )
2025-01-13 17:02:35 -05:00
MtnBurrit0
f753829559
Always update the ephemeral environment when the label is added ( #5240 )
2025-01-09 10:50:03 -07:00
Vince Grassia
28d5535010
Update checkout action for cherry pick job ( #5242 )
2025-01-09 18:33:52 +01:00
MtnBurrit0
bd657c76cf
Remove unused workflow now that config has been migrated. ( #5239 )
2025-01-09 17:10:49 +00:00
renovate[bot]
f265911526
[deps] BRE: Update gh minor ( #5016 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-09 10:09:55 +01:00
Patrick-Pimentel-Bitwarden
cc96e35072
Auth/pm 2996/add auth request data to devices response model ( #5152 )
...
fix(auth): [PM-2996] Add Pending Auth Request Data to Devices Response
- New stored procedure to fetch the appropriate data.
- Updated devices controller to respond with the new data.
- Tests written at the controller and repository level.
Resolves PM-2996
2025-01-07 15:52:53 -05:00
renovate[bot]
066cd4655d
[deps] BRE: Update codecov/codecov-action action to v5 ( #5071 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-03 17:33:57 -05:00
renovate[bot]
4b2030de77
[deps] BRE: Update anchore/scan-action action to v6 ( #5180 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-01-03 11:35:28 -05:00
MtnBurrit0
840ff00189
BRE-292: Sync ephemeral environment with GH workflow ( #5174 )
...
* Add sync_environment call
* Put callable workflow in it's own job
* Switch to context for GitHub input
* Set requirements and inherit secrets
* Add the condition to the job
* Update .github/workflows/build.yml
Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>
---------
Co-authored-by: Vince Grassia <593223+vgrassia@users.noreply.github.com>
2025-01-02 13:58:32 -07:00
Vince Grassia
144c0a2fee
Add missing curly brace ( #5203 )
2024-12-31 10:49:52 -08:00
Michał Chęciński
16488091d2
Remove is_workflow_call input from build workflow ( #5161 )
2024-12-17 10:45:02 -05:00
Opeyemi
d0c72a34f1
Update SH Unified Build trigger ( #5154 )
...
* Update SH Unified Build trigger
* make value a boolean
2024-12-16 15:21:05 +01:00
Matt Bishop
c0a9c55891
Fix image path formation for Cosign ( #5151 )
2024-12-13 10:26:45 -05:00
Matt Bishop
11bdb93d1e
Sign main branch container builds with cosign ( #5148 )
...
* Sign main branch container builds with cosign
* Properly label
2024-12-13 09:41:17 -05:00
Michał Chęciński
470a12640e
Trigger unified build on rc and hotfix-rc branches ( #5108 )
2024-12-04 13:18:58 +00:00
Michał Chęciński
8b1b07884e
Fix github token generating in repository-management.yml workflow ( #5038 )
2024-11-14 13:47:37 +01:00
Matt Bishop
eec4a77bda
Check run earlier during setup ( #5022 )
2024-11-11 13:19:20 -05:00
Alex Urbina
89be2f495a
Fix Hackerone Report ID 2830741 ( #5010 )
2024-11-08 20:41:58 +00:00
MtnBurrit0
a56f3a587c
Update logic to handle pull_request_target ( #5008 )
...
- Removing the grep and create a conditional based on GITHUB_EVENT_NAME
2024-11-08 11:58:07 -07:00
Matt Bishop
e7cbdaa469
Only build Unified on main branch pushes ( #5006 )
2024-11-08 10:31:18 -05:00
Matt Bishop
fcb706b9c5
Catch PR targets for certain build operations ( #5003 )
...
* Catch PR targets for certain build operations
* Support EE
2024-11-07 17:11:01 -05:00
Matt Bishop
f7957f7053
Check run permissions for secrets usage ( #4992 )
2024-11-07 09:56:57 -05:00
Justin Baur
b5014ed6d8
Add MariaDB test ( #4989 )
...
* Add MariaDB Test
* Use Correct Syntax
* Use Container Name
* Add Port
* Remove MySQL Thing
* Remove Another Thing
* Different Port Syntax
* Add Back Skipped Checks
* Use Correct Connection String in Test Setup
* Update .github/workflows/test-database.yml
Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
* Update .github/workflows/test-database.yml
Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
* Use MariaDB 10
---------
Co-authored-by: Matt Bishop <mbishop@bitwarden.com>
2024-11-06 21:51:10 +00:00
Matt Bishop
e7bd31c009
Check for secrets on Docker builds ( #4985 )
2024-11-06 13:56:12 -05:00
Matt Bishop
d63e18ec7a
Check for secrets on database test report upload ( #4984 )
2024-11-06 11:38:25 -05:00
Vince Grassia
fded36c999
Add version bump task ( #4976 )
2024-11-05 11:47:58 -05:00