Skip to content

Commit 0ec0c08

Browse files
binbin-liakashsinghalshahramk64dependabot[bot]
authored
fix: enforce host checking before exchanging a refresh token (#2069) (#2072)
Signed-off-by: Binbin Li <[email protected]> Signed-off-by: Akash Singhal <[email protected]> Signed-off-by: Shahram Kalantari <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: Akash Singhal <[email protected]> Co-authored-by: Shahram Kalantari <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 0f2a6ad commit 0ec0c08

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

62 files changed

+514
-563
lines changed

‎.devcontainer/Dockerfile

+2-2
Original file line numberDiff line numberDiff line change
@@ -13,8 +13,8 @@
1313

1414
# See here for image contents: https://github.com/microsoft/vscode-dev-containers/tree/v0.245.2/containers/go/.devcontainer/base.Dockerfile
1515

16-
# [Choice] Go version (use -bullseye variants on local arm64/Apple Silicon): 1.21-bullseye, 1, 1.19, 1.18, 1-bullseye, 1.19-bullseye, 1.18-bullseye, 1-buster, 1.19-buster, 1.18-buster
17-
FROM mcr.microsoft.com/vscode/devcontainers/go:1.21-bullseye@sha256:0ea3913135923a684b37f9e75a1e9adbb14551199244656b77f516c4c0c6d5bc
16+
# [Choice] Go version (use -bullseye variants on local arm64/Apple Silicon): 1.22-bullseye, 1.21-bullseye, 1, 1.19, 1.18, 1-bullseye, 1.19-bullseye, 1.18-bullseye, 1-buster, 1.19-buster, 1.18-buster
17+
FROM mcr.microsoft.com/vscode/devcontainers/go:1.22-bullseye@sha256:a80cd1df0fed16f2a6f6854b87df49940100449aa193fb55dc30acfdc7fd7309
1818

1919
# [Choice] Node.js version: none, lts/*, 18, 16, 14
2020
ARG NODE_VERSION="none"

‎.devcontainer/devcontainer.json

+2-2
Original file line numberDiff line numberDiff line change
@@ -5,10 +5,10 @@
55
"build": {
66
"dockerfile": "Dockerfile",
77
"args": {
8-
// Update the VARIANT arg to pick a version of Go: 1.21, 1.20, 1.19, 1.18
8+
// Update the VARIANT arg to pick a version of Go: 1.22, 1.21, 1.20, 1.19, 1.18
99
// Append -bullseye or -buster to pin to an OS version.
1010
// Use -bullseye variants on local arm64/Apple Silicon.
11-
"VARIANT": "1.21-bullseye",
11+
"VARIANT": "1.22-bullseye",
1212
// Options
1313
"NODE_VERSION": "none",
1414
// Ratify-specific devcontainer options

‎.github/crd.trivyignore.yaml

+3
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
vulnerabilities:
2+
- id: CVE-2024-45338
3+
statement: kubectl is not vulnerable to this and is reason for being flagged

‎.github/dependabot.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ updates:
3333
interval: "weekly"
3434
ignore:
3535
- dependency-name: "golang"
36-
versions: '> 1.21'
36+
versions: '> 1.23'
3737
commit-message:
3838
prefix: "chore"
3939

@@ -43,6 +43,6 @@ updates:
4343
interval: "weekly"
4444
ignore:
4545
- dependency-name: "vscode/devcontainers/go"
46-
versions: '> 1.21'
46+
versions: '> 1.23'
4747
commit-message:
4848
prefix: "chore"

‎.github/workflows/build-pr.yml

+11-11
Original file line numberDiff line numberDiff line change
@@ -22,9 +22,9 @@ jobs:
2222
strategy:
2323
fail-fast: false
2424
matrix:
25-
KUBERNETES_VERSION: ["1.29.2"]
26-
GATEKEEPER_VERSION: ["3.15.0"]
27-
uses: ./.github/workflows/e2e-k8s.yml
25+
KUBERNETES_VERSION: ["1.31.2"]
26+
GATEKEEPER_VERSION: ["3.18.0"]
27+
uses: ./.github/workflows/e2e-k8s.yml
2828
with:
2929
k8s_version: ${{ matrix.KUBERNETES_VERSION }}
3030
gatekeeper_version: ${{ matrix.GATEKEEPER_VERSION }}
@@ -35,9 +35,9 @@ jobs:
3535
strategy:
3636
fail-fast: false
3737
matrix:
38-
KUBERNETES_VERSION: ["1.28.7", "1.29.2"]
39-
GATEKEEPER_VERSION: ["3.13.0", "3.14.0", "3.15.0"]
40-
uses: ./.github/workflows/e2e-k8s.yml
38+
KUBERNETES_VERSION: ["1.30.6", "1.31.2"]
39+
GATEKEEPER_VERSION: ["3.16.0", "3.17.0", "3.18.0"]
40+
uses: ./.github/workflows/e2e-k8s.yml
4141
with:
4242
k8s_version: ${{ matrix.KUBERNETES_VERSION }}
4343
gatekeeper_version: ${{ matrix.GATEKEEPER_VERSION }}
@@ -51,8 +51,8 @@ jobs:
5151
strategy:
5252
fail-fast: false
5353
matrix:
54-
KUBERNETES_VERSION: ["1.27.9", "1.29.2"]
55-
GATEKEEPER_VERSION: ["3.13.0", "3.14.0", "3.15.0"]
54+
KUBERNETES_VERSION: ["1.30.6", "1.31.2"]
55+
GATEKEEPER_VERSION: ["3.16.0", "3.17.0", "3.18.0"]
5656
uses: ./.github/workflows/e2e-aks.yml
5757
with:
5858
k8s_version: ${{ matrix.KUBERNETES_VERSION }}
@@ -72,11 +72,11 @@ jobs:
7272
environment: azure-test
7373
steps:
7474
- name: Check out code into the Go module directory
75-
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
76-
- name: Set up Go 1.21
75+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
76+
- name: Set up Go 1.22
7777
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
7878
with:
79-
go-version: '1.21'
79+
go-version: '1.22'
8080

8181
- name: Az CLI login
8282
uses: azure/login@6b2456866fc08b011acb422a92a4aa20e2c4de32 # v2.1.0

‎.github/workflows/codeql.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
- name: setup go environment
3232
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
3333
with:
34-
go-version: "1.21"
34+
go-version: "1.23"
3535
- name: Initialize CodeQL
3636
uses: github/codeql-action/init@cdcdbb579706841c47f7063dda365e292e5cad7a # tag=v2.13.4
3737
with:

‎.github/workflows/e2e-aks.yml

+4-4
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ on:
99
k8s_version:
1010
description: 'Kubernetes version'
1111
required: true
12-
default: '1.29.2'
12+
default: "1.31.2"
1313
type: string
1414
gatekeeper_version:
1515
description: 'Gatekeeper version'
@@ -33,11 +33,11 @@ jobs:
3333
contents: read
3434
steps:
3535
- name: Check out code into the Go module directory
36-
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
37-
- name: Set up Go 1.21
36+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
37+
- name: Set up Go 1.23
3838
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
3939
with:
40-
go-version: '1.21'
40+
go-version: '1.23'
4141
- name: Az CLI login
4242
uses: azure/login@6b2456866fc08b011acb422a92a4aa20e2c4de32 # v2.1.0
4343
with:

‎.github/workflows/e2e-cli.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
- name: setup go environment
3232
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
3333
with:
34-
go-version: "1.21"
34+
go-version: "1.23"
3535
- name: Run tidy
3636
run: go mod tidy
3737
- name: Build CLI
@@ -55,7 +55,7 @@ jobs:
5555
- name: setup go environment
5656
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
5757
with:
58-
go-version: "1.21"
58+
go-version: "1.23"
5959
- name: Run tidy
6060
run: go mod tidy
6161
- name: Build CLI

‎.github/workflows/e2e-k8s.yml

+4-4
Original file line numberDiff line numberDiff line change
@@ -9,7 +9,7 @@ on:
99
k8s_version:
1010
description: 'Kubernetes version'
1111
required: true
12-
default: '1.29.2'
12+
default: "1.31.2"
1313
type: string
1414
gatekeeper_version:
1515
description: 'Gatekeeper version'
@@ -26,11 +26,11 @@ jobs:
2626
contents: read
2727
steps:
2828
- name: Check out code into the Go module directory
29-
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
30-
- name: Set up Go 1.21
29+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
30+
- name: Set up Go 1.23
3131
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
3232
with:
33-
go-version: '1.21'
33+
go-version: '1.23'
3434

3535
- name: Bootstrap e2e
3636
run: |

‎.github/workflows/golangci-lint.yml

+5-4
Original file line numberDiff line numberDiff line change
@@ -16,9 +16,10 @@ jobs:
1616
steps:
1717
- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
1818
with:
19-
go-version: '1.21'
20-
- uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
19+
go-version: '1.23'
20+
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
2121
- name: golangci-lint
22-
uses: golangci/golangci-lint-action@a4f60bb28d35aeee14e6880718e0c85ff1882e64 # v6.0.1
22+
uses: golangci/golangci-lint-action@ec5d18412c0aeab7936cb16880d708ba2a64e1ae # v6.2.0
2323
with:
24-
version: v1.55.2
24+
version: v1.62.2
25+
args: --timeout=20m

‎.github/workflows/high-availability.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -30,11 +30,11 @@ jobs:
3030
DAPR_VERSION: ["1.13.2"]
3131
steps:
3232
- name: Check out code into the Go module directory
33-
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
34-
- name: Set up Go 1.21
33+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
34+
- name: Set up Go 1.23
3535
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
3636
with:
37-
go-version: '1.21'
37+
go-version: '1.23'
3838

3939
- name: Bootstrap e2e
4040
run: |

‎.github/workflows/publish-dev-assets.yml

+10-1
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,16 @@ jobs:
4545
- name: docker build ratify-crds
4646
run: |
4747
docker buildx create --use
48-
docker buildx build --build-arg KUBE_VERSION="1.29.2" -f crd.Dockerfile --platform linux/amd64,linux/arm64,linux/arm/v7 --label org.opencontainers.image.revision=${{ github.sha }} -t ${{ steps.prepare.outputs.crdref }}:${{ steps.prepare.outputs.version }} -t ${{ steps.prepare.outputs.crdref }} --push ./charts/ratify/crds
48+
docker buildx build \
49+
--attest type=sbom \
50+
--attest type=provenance,mode=max \
51+
--build-arg KUBE_VERSION="1.30.6" \
52+
-f crd.Dockerfile \
53+
--platform linux/amd64,linux/arm64,linux/arm/v7 \
54+
--label org.opencontainers.image.revision=${{ github.sha }} \
55+
-t ${{ steps.prepare.outputs.crdref }}:${{ steps.prepare.outputs.version }} \
56+
-t ${{ steps.prepare.outputs.crdref }} \
57+
--push ./charts/ratify/crds
4958
- name: docker build ratify base
5059
run: |
5160
docker buildx create --use

‎.github/workflows/publish-package.yml

+9-1
Original file line numberDiff line numberDiff line change
@@ -44,7 +44,15 @@ jobs:
4444
- name: docker build ratify-crds
4545
run: |
4646
docker buildx create --use
47-
docker buildx build --build-arg KUBE_VERSION="1.29.2" -f crd.Dockerfile --platform linux/amd64,linux/arm64,linux/arm/v7 --label org.opencontainers.image.revision=${{ github.sha }} -t ${{ steps.prepare.outputs.crdref }} --push ./charts/ratify/crds
47+
docker buildx build \
48+
--attest type=sbom \
49+
--attest type=provenance,mode=max \
50+
--build-arg KUBE_VERSION="1.30.6" \
51+
-f crd.Dockerfile \
52+
--platform linux/amd64,linux/arm64,linux/arm/v7 \
53+
--label org.opencontainers.image.revision=${{ github.sha }} \
54+
-t ${{ steps.prepare.outputs.crdref }} \
55+
--push ./charts/ratify/crds
4856
- name: docker build ratify base
4957
run: |
5058
docker buildx create --use

‎.github/workflows/quick-start.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -27,14 +27,14 @@ jobs:
2727
contents: read
2828
strategy:
2929
matrix:
30-
KUBERNETES_VERSION: ["1.29.2"]
30+
KUBERNETES_VERSION: ["1.30.6"]
3131
steps:
3232
- name: Checkout
3333
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
3434
- name: setup go environment
3535
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
3636
with:
37-
go-version: "1.21"
37+
go-version: "1.23"
3838
- name: Run tidy
3939
run: go mod tidy
4040
- name: Bootstrap e2e

‎.github/workflows/release.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
- name: Set up Go
2424
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
2525
with:
26-
go-version: '1.21'
26+
go-version: '1.23'
2727

2828
- name: Goreleaser
2929
uses: goreleaser/goreleaser-action@5742e2a039330cbb23ebf35f046f814d4c6ff811 # v5.1.0

‎.github/workflows/run-full-validation.yml

+8-8
Original file line numberDiff line numberDiff line change
@@ -24,9 +24,9 @@ jobs:
2424
strategy:
2525
fail-fast: false
2626
matrix:
27-
KUBERNETES_VERSION: ["1.28.7", "1.29.2"]
28-
GATEKEEPER_VERSION: ["3.13.0", "3.14.0", "3.15.0"]
29-
uses: ./.github/workflows/e2e-k8s.yml
27+
KUBERNETES_VERSION: ["1.30.6", "1.31.2"]
28+
GATEKEEPER_VERSION: ["3.16.0", "3.17.0", "3.18.0"]
29+
uses: ./.github/workflows/e2e-k8s.yml
3030
with:
3131
k8s_version: ${{ matrix.KUBERNETES_VERSION }}
3232
gatekeeper_version: ${{ matrix.GATEKEEPER_VERSION }}
@@ -39,8 +39,8 @@ jobs:
3939
strategy:
4040
fail-fast: false
4141
matrix:
42-
KUBERNETES_VERSION: ["1.27.9", "1.29.2"]
43-
GATEKEEPER_VERSION: ["3.13.0", "3.14.0", "3.15.0"]
42+
KUBERNETES_VERSION: ["1.30.6", "1.31.2"]
43+
GATEKEEPER_VERSION: ["3.16.0", "3.17.0", "3.18.0"]
4444
uses: ./.github/workflows/e2e-aks.yml
4545
with:
4646
k8s_version: ${{ matrix.KUBERNETES_VERSION }}
@@ -60,11 +60,11 @@ jobs:
6060
environment: azure-test
6161
steps:
6262
- name: Check out code into the Go module directory
63-
uses: actions/checkout@44c2b7a8a4ea60a981eaca3cf939b5f4305c123b # v4.1.5
64-
- name: Set up Go 1.21
63+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
64+
- name: Set up Go 1.23
6565
uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
6666
with:
67-
go-version: '1.21'
67+
go-version: '1.23'
6868

6969
- name: Az CLI login
7070
uses: azure/login@6b2456866fc08b011acb422a92a4aa20e2c4de32 # v2.1.0

‎.github/workflows/scan-vulns.yaml

+6-7
Original file line numberDiff line numberDiff line change
@@ -27,14 +27,16 @@ jobs:
2727

2828
- uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
2929
with:
30-
go-version: "1.22"
30+
go-version: "1.23"
3131
check-latest: true
3232
- uses: golang/govulncheck-action@dd0578b371c987f96d1185abb54344b44352bd58 # v1.0.3
3333

3434
scan_vulnerabilities:
3535
name: "[Trivy] Scan for vulnerabilities"
3636
runs-on: ubuntu-22.04
3737
timeout-minutes: 15
38+
env:
39+
TRIVY_VERSION: 0.58.2
3840
steps:
3941
- name: Harden Runner
4042
uses: step-security/harden-runner@17d0e2bd7d51742c71671bd19fa12bdc9d40a3d6 # v2.8.1
@@ -50,8 +52,6 @@ jobs:
5052
wget https://github.com/aquasecurity/trivy/releases/download/v${{ env.TRIVY_VERSION }}/trivy_${{ env.TRIVY_VERSION }}_Linux-64bit.tar.gz
5153
tar zxvf trivy_${{ env.TRIVY_VERSION }}_Linux-64bit.tar.gz
5254
echo "$(pwd)" >> $GITHUB_PATH
53-
env:
54-
TRIVY_VERSION: "0.46.0"
5555
5656
- name: Run trivy on git repository
5757
run: |
@@ -66,8 +66,7 @@ jobs:
6666
for img in "localbuild:test" "localbuildcrd:test"; do
6767
trivy image --ignore-unfixed --vuln-type="os,library" "${img}"
6868
done
69-
- name: Run trivy on images and exit on HIGH severity
69+
- name: Run trivy on images and exit on HIGH/CRITICAL severity
7070
run: |
71-
for img in "localbuild:test" "localbuildcrd:test"; do
72-
trivy image --ignore-unfixed --exit-code 1 --severity HIGH --vuln-type="os,library" "${img}"
73-
done
71+
trivy image --skip-db-update --ignore-unfixed --exit-code 1 --severity HIGH,CRITICAL --vuln-type="os,library" "localbuild:test"
72+
trivy image --skip-db-update --ignore-unfixed --exit-code 1 --severity HIGH,CRITICAL --vuln-type="os,library" --show-suppressed --ignorefile ./.github/crd.trivyignore.yaml "localbuildcrd:test"

‎.golangci.yml

-3
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,3 @@
1-
run:
2-
deadline: 5m
3-
41
linters:
52
disable-all: true
63
enable:

‎CONTRIBUTING.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -161,8 +161,8 @@ Follow the steps below to build and deploy a Ratify image with your private chan
161161
export REGISTRY=yourregistry
162162
docker buildx create --use
163163

164-
docker buildx build -f httpserver/Dockerfile --platform linux/amd64 --build-arg build_sbom=true --build-arg build_licensechecker=true --build-arg build_schemavalidator=true --build-arg build_vulnerabilityreport=true -t ${REGISTRY}/deislabs/ratify:yourtag .
165-
docker build --progress=plain --build-arg KUBE_VERSION="1.29.2" --build-arg TARGETOS="linux" --build-arg TARGETARCH="amd64" -f crd.Dockerfile -t ${REGISTRY}/localbuildcrd:yourtag ./charts/ratify/crds
164+
docker buildx build -f httpserver/Dockerfile --platform linux/amd64 --build-arg build_sbom=true --build-arg build_licensechecker=true --build-arg build_schemavalidator=true --build-arg build_vulnerabilityreport=true -t ${REGISTRY}/ratify-project/ratify:yourtag .
165+
docker build --progress=plain --build-arg KUBE_VERSION="1.30.6" --build-arg TARGETOS="linux" --build-arg TARGETARCH="amd64" -f crd.Dockerfile -t ${REGISTRY}/localbuildcrd:yourtag ./charts/ratify/crds
166166
```
167167

168168
#### [Authenticate](https://docs.docker.com/engine/reference/commandline/login/#usage) with your registry, and push the newly built image

‎Makefile

+6-5
Original file line numberDiff line numberDiff line change
@@ -25,10 +25,10 @@ LDFLAGS += -X $(GO_PKG)/internal/version.GitCommitHash=$(GIT_COMMIT_HASH)
2525
LDFLAGS += -X $(GO_PKG)/internal/version.GitTreeState=$(GIT_TREE_STATE)
2626
LDFLAGS += -X $(GO_PKG)/internal/version.GitTag=$(GIT_TAG)
2727

28-
KIND_VERSION ?= 0.22.0
29-
KUBERNETES_VERSION ?= 1.29.2
30-
KIND_KUBERNETES_VERSION ?= 1.29.2
31-
GATEKEEPER_VERSION ?= 3.15.0
28+
KIND_VERSION ?= 0.25.0
29+
KUBERNETES_VERSION ?= 1.30.6
30+
KIND_KUBERNETES_VERSION ?= 1.30.6
31+
GATEKEEPER_VERSION ?= 3.17.0
3232
DAPR_VERSION ?= 1.12.5
3333
COSIGN_VERSION ?= 2.2.3
3434
NOTATION_VERSION ?= 1.1.0
@@ -199,7 +199,7 @@ e2e-dependencies:
199199
# Download and install kind
200200
curl -L https://github.com/kubernetes-sigs/kind/releases/download/v${KIND_VERSION}/kind-linux-amd64 --output ${GITHUB_WORKSPACE}/bin/kind && chmod +x ${GITHUB_WORKSPACE}/bin/kind
201201
# Download and install kubectl
202-
curl -L https://storage.googleapis.com/kubernetes-release/release/v${KUBERNETES_VERSION}/bin/linux/amd64/kubectl --output ${GITHUB_WORKSPACE}/bin/kubectl && chmod +x ${GITHUB_WORKSPACE}/bin/kubectl
202+
curl -L https://dl.k8s.io/release/v${KUBERNETES_VERSION}/bin/linux/amd64/kubectl --output ${GITHUB_WORKSPACE}/bin/kubectl && chmod +x ${GITHUB_WORKSPACE}/bin/kubectl
203203
# Download and install bats
204204
curl -sSLO https://github.com/bats-core/bats-core/archive/v${BATS_VERSION}.tar.gz && tar -zxvf v${BATS_VERSION}.tar.gz && bash bats-core-${BATS_VERSION}/install.sh ${GITHUB_WORKSPACE}
205205
# Download and install jq
@@ -267,6 +267,7 @@ e2e-helmfile-install:
267267
cd .staging/helmfilebin && tar -xvf helmfilebin.tar.gz
268268

269269
e2e-docker-credential-store-setup:
270+
sudo apt-get install pass
270271
rm -rf .staging/pass
271272
mkdir -p .staging/pass
272273
cd .staging/pass && git clone https://github.com/docker/docker-credential-helpers.git

0 commit comments

Comments
 (0)