Skip to content

chore: update develop with changes on main #289

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Jun 21, 2024
Merged

chore: update develop with changes on main #289

merged 3 commits into from
Jun 21, 2024

Conversation

mbruzda-splunk
Copy link
Contributor

No description provided.

kdoroszko-splunk and others added 3 commits May 20, 2024 13:15
Test runs:

https://github.com/splunk/splunk-add-on-for-amazon-web-services/actions/runs/9269557494
https://github.com/splunk/test-addonfactory-repo/actions/runs/9270329208

Changes possibly affecting customers:
- add ui_marker to enable splitting UI tests execution
- fix for failing upload-artifact@v4 due to multiple artifacts with same
name
- replace edplato/trufflehog-actions-scan action with official
trufflehog action latest release
- bump version of workflow-engine-base image to v4.0 (Ubuntu 20 ->
Ubuntu 22)

Changes not affecting customers:
- wfe-test-runner-action update to v5 and change of the way that browser
is determined in k8s
- docs and ci related updates

Also note that starting from release v4.16.0 some assets are removed
from TA releases:
1. installation-actions.json
2. installation-update.json
3. \<TA-release\>-_forwarders.spl
4. \<TA-release\>-_indexers.spl
5. \<TA-release\>-_search_heads.spl
Recently multiple false positives reported for trufflehog v3:
https://splunk.slack.com/archives/CRTNPEZ4M/p1717405810934429

Let's add --only-verified flag to callout to avoid multiple fp for now.
Final solution need to be established/reviewed with prodsec.
More info on secrets verification in trufflehog:
https://trufflesecurity.com/blog/how-trufflehog-verifies-secrets

Tests:
https://github.com/splunk/splunk-add-on-for-microsoft-office-365/actions/runs/9399856169
@mbruzda-splunk mbruzda-splunk requested a review from a team as a code owner June 21, 2024 10:02
@mkolasinski-splunk mkolasinski-splunk enabled auto-merge (squash) June 21, 2024 10:07
@mbruzda-splunk mbruzda-splunk merged commit 2960896 into develop Jun 21, 2024
6 checks passed
@github-actions github-actions bot locked and limited conversation to collaborators Jun 21, 2024
@srv-rr-github-token
Copy link

🎉 This PR is included in version 4.16.8 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants