Visitar URL original
Comparing v0.2.2...v0.2.3 · defenseunicorns/maru-runner · GitHub
Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: defenseunicorns/maru-runner
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: v0.2.2
Choose a base ref
...
head repository: defenseunicorns/maru-runner
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: v0.2.3
Choose a head ref
  • 8 commits
  • 28 files changed
  • 6 contributors

Commits on Sep 18, 2024

  1. fix: sort slices before comparing in test (#142)

    ## Description
    
    The Runner test
    `TestRunner_GetBaseActionCfg/extraEnv_adds_and_overrides_defaults` in
    [`src/pkg/runner/actions_test.go`](https://github.com/defenseunicorns/maru-runner/blob/535258256cd1714f55e643075ae15919316e4aec/src/pkg/runner/actions_test.go#L502)
    is flaky because we don't sort the string slices before comparing them,
    and occasionally they get created in slightly different orders:
    
    ```zsh
    === RUN   TestRunner_GetBaseActionCfg/extraEnv_adds_and_overrides_defaults
        actions_test.go:502:
                    Error Trace:    /Users/clint/go/github.com/defenseunicorns/maru-runner/src/pkg/runner/actions_test.go:502
                    Error:          Not equal:
                                    expected: []string{"ENV1=fromDefault", "ENV2=xyz1", "ENV4=fromSet", "ENV2=alsoFromEnv", "ENV3=fromExtra"}
                                    actual  : []string{"ENV1=fromDefault", "ENV2=xyz1", "ENV4=fromSet", "ENV3=fromExtra", "ENV2=alsoFromEnv"}
    ```
    
    note the expected `"ENV2=alsoFromEnv", "ENV3=fromExtra"` vs. the actual
    `"ENV3=fromExtra", "ENV2=alsoFromEnv"`.
    
    Assuming a successful test run produces this output:
    
    ```zsh
    === RUN   TestRunner_GetBaseActionCfg
    === RUN   TestRunner_GetBaseActionCfg/extraEnv_adds_and_overrides_defaults
    --- PASS: TestRunner_GetBaseActionCfg (0.00s)
        --- PASS: TestRunner_GetBaseActionCfg/extraEnv_adds_and_overrides_defaults (0.00s)
    ```
    
    If we run the test enough times it will fail, as shown below where we
    would expect 200 lines of `-- PASS` here when running the test 100 times
    (2x per run), and 0 for `--- FAIL`:
    
    ```zsh
     github.com/defenseunicorns/maru-runner on  main [$]
     ➜ go test ./src/pkg/runner/... -v -run=TestRunner_GetBaseActionCfg/extraEnv_adds_and_overrides_defaults -count=100 | grep '\-\-\- PASS' | wc -l
         142
    
     github.com/defenseunicorns/maru-runner on  main
     ➜ go test ./src/pkg/runner/... -v -run=TestRunner_GetBaseActionCfg/extraEnv_adds_and_overrides_defaults -count=100 | grep '\-\-\- FAIL' | wc -l
          46
    ```
    
    It's flaky, so your numbers will vary each time you run it. 
    
    In this PR we sort both slices before comparing. 
    Here's the updated output:
    
    ```zsh
     github.com/defenseunicorns/maru-runner on  fix-runner-test-sort
     ➜ go test ./src/pkg/runner/... -v -run=TestRunner_GetBaseActionCfg/extraEnv_adds_and_overrides_defaults -count=100 | grep '\-\-\- PASS' | wc -l
         200
    
     github.com/defenseunicorns/maru-runner on  fix-runner-test-sort
     ➜ go test ./src/pkg/runner/... -v -run=TestRunner_GetBaseActionCfg/extraEnv_adds_and_overrides_defaults -count=100 | grep '\-\-\- FAIL' | wc -l
           0
    ```
    
    ## Type of change
    
    - [x] Bug fix (non-breaking change which fixes an issue)
    - [ ] New feature (non-breaking change which adds functionality)
    - [ ] Other (security config, docs update, etc)
    
    ## Checklist before merging
    
    - [x] Test, docs, adr added or updated as needed
    - [x] [Contributor Guide
    Steps](https://github.com/defenseunicorns/maru-runner/blob/main/CONTRIBUTING.md)
    followed
    
    Signed-off-by: catsby <clint@ctshryock.com>
    catsby authored Sep 18, 2024
    Configuration menu
    Copy the full SHA
    77f52c9 View commit details
    Browse the repository at this point in the history

Commits on Sep 19, 2024

  1. chore: use go-list to filter out e2e tests in test-unit step (#140)

    ## Description
    
    NOTE: the below is now out of date... see UPDATE 2
    
    Currently the makefile separates unit and e2e tests "physically", where
    unit tests *only* live in `src/pkg/...` and e2e tests *only* live in
    `src/test/e2e...`. The result is if you want to add tests to something
    like `src/message` or `src/types` you can't run them alongside the
    others unless you add a step to the makefile.
    
    In this PR we change ~both make steps~ _the test-unit make step_ to run
    tests across the entire codebase, ~but~ _and_ we restrict e2e tests
    behind the setting of an environment variable that's checked in the test
    themselves. The `test-unit` step does not set the variable, where as
    `test-e2e` does. Note that this does change the output of `test-unit` as
    it will now show the e2e tests as skipped.
    
    Alternatives to this would be to move the e2e tests outside of `src` but
    this seemed simple enough. The end goal is primarily because we can now
    add tests outside of `src/pkg` and not worry about making extra make
    steps to make sure they're ran in CI.
    
    UPDATE: I restored the part in the e2e step that did `cd src/test/e2e`
    because it assumed a maru binary there.
    
    **UPDATE 2:** after feedback I scrapped the env part and just used `go
    list ./... | grep` to filter out the e2e tests when running `test-unit`.
    Much simpler.
    
    ## Type of change
    
    - [ ] Bug fix (non-breaking change which fixes an issue)
    - [ ] New feature (non-breaking change which adds functionality)
    - [x] Other (security config, docs update, etc)
    
    ## Checklist before merging
    
    - [x] Test, docs, adr added or updated as needed
    - [x] [Contributor Guide
    Steps](https://github.com/defenseunicorns/maru-runner/blob/main/CONTRIBUTING.md)
    followed
    
    ---------
    
    Signed-off-by: catsby <clint@ctshryock.com>
    Co-authored-by: Wayne Starr <Racer159@users.noreply.github.com>
    catsby and Racer159 authored Sep 19, 2024
    Configuration menu
    Copy the full SHA
    e72da68 View commit details
    Browse the repository at this point in the history
  2. feat: add templated conditionals to tasks (#139)

    ## Description
    
    Adds an `if` keyword to `task:` and `cmd:` that evaluates based on a go
    template to true or false to facilitate conditional task execution.
    
    ## Related Issue
    
    ## Type of change
    
    - [ ] Bug fix (non-breaking change which fixes an issue)
    - [x] New feature (non-breaking change which adds functionality)
    - [ ] Other (security config, docs update, etc)
    
    ## Checklist before merging
    
    - [x] Test, docs, adr added or updated as needed
    - [x] [Contributor Guide
    Steps](https://github.com/defenseunicorns/maru-runner/blob/main/CONTRIBUTING.md)
    followed
    
    ---------
    
    Co-authored-by: Eric Wyles <23637493+ericwyles@users.noreply.github.com>
    Co-authored-by: Wayne Starr <me@racer159.com>
    3 people authored Sep 19, 2024
    Configuration menu
    Copy the full SHA
    87c56e4 View commit details
    Browse the repository at this point in the history
  3. fix: update log level handling (#141)

    ## Short Description
    
    This PR updates Maru's logging to match the standard library's
    `log/slog` package, and appropriately filters log messages according to
    levels. Tests included and feedback very welcome.
    
    ## Long Description
    
    The current implementation of log level handling is misleading because
    our [custom
    handler](https://github.com/defenseunicorns/maru-runner/blob/535258256cd1714f55e643075ae15919316e4aec/src/message/slog.go#L20-L23)
    doesn't filter by level. The code comment mentions logging functions
    already being aware if they are allowed to be called, but in practice I
    have not found that to be true. This is further complicated by Maru's
    log levels not matching what `log/slog` uses both in values and in
    ordering.
    
    Example: slog uses these levels/ordering
    
    ```go
    const (
    	LevelDebug Level = -4
    	LevelInfo  Level = 0
    	LevelWarn  Level = 4
    	LevelError Level = 8
    )
    ```
    
    (See here for source and long explaination to the numbers used:
    https://pkg.go.dev/log/slog#Level)
    
    Where as Maru uses these levels/ordering:
    ```go
    const (
    	// WarnLevel level. Non-critical entries that deserve eyes.
    	WarnLevel LogLevel = iota
    	// InfoLevel level. General operational entries about what's going on inside the
    	// application.
    	InfoLevel
    	// DebugLevel level. Usually only enabled when debugging. Very verbose logging.
    	DebugLevel
    	// TraceLevel level. Designates finer-grained informational events than the Debug.
    	TraceLevel
    )
    ```
    
    (source:
    [src/message/logging.go#L16-L29](https://github.com/defenseunicorns/maru-runner/blob/535258256cd1714f55e643075ae15919316e4aec/src/message/logging.go#L16-L29))
    
    In theory, implementing the [`Handler`
    interface](https://cs.opensource.google/go/go/+/refs/tags/go1.23.1:src/log/slog/handler.go;l=29-33)
    would have us ignore messages with a lower level than the one set. Maru
    sets it's default log level to `InfoLevel` (from Maru's constants, not
    slog's) which results in a value of `1`. However because our `InfoLevel`
    is `1` and slog's `LevelInfo` is `0`, then in theory Maru's logger
    should actually ignore it because it's a lower level. A call to
    `message.SLog.Info()` ([ex. in
    utils.go](https://github.com/defenseunicorns/maru-runner/blob/535258256cd1714f55e643075ae15919316e4aec/src/pkg/utils/utils.go#L35))
    invokes slog's `Info()` method, which calls an internal [method
    `log()`](https://cs.opensource.google/go/go/+/refs/tags/go1.23.1:src/log/slog/logger.go;l=208-211)
    with slog's `LevelInfo` level which is a value of `0`. The [`log()`
    method](https://cs.opensource.google/go/go/+/refs/tags/go1.23.1:src/log/slog/logger.go;l=238-258)
    calls the handlers `Enabled()` method to see if it should log the
    message, which for maru always returns `true`, and then passes it on to
    the handlers `Handle()` method (Maru's `Handle()` method
    [here](https://github.com/defenseunicorns/maru-runner/blob/535258256cd1714f55e643075ae15919316e4aec/src/message/slog.go#L37))
    and we print the message, even though we shouldn't because it's a lower
    value than our default.
    
    The net effect is setting the log level with `--log-level` has no
    effect, except for when setting to `trace`, in which case we output
    pterm debugging information with lines for errors/traces and debug
    calls. Otherwise Maru will always output all of the logs from `Debug()`,
    `Info()`, `Warn()` or `Error()` regardless of the level set.
    
    This PR updates Maru's log level constants both in values and ordering
    to match the standard library `log/slog` package, and implements the
    `Enabled()` method in the handler to filter correctly based on level.
    The net effect of this PR should be benign in that we aren't changing
    any usage details, but going forward we'll correctly output logs
    according to the set level.
    
    **NOTE:** This PR is based off of [my other PR (#140) for changing the
    `Makefile`](#140)
    with regards to `test-unit` and `test-e2e` tests.
    
    ## Test output:
    
    ```zsh
     ➜ go test ./src/message/... -v -count=1
    === RUN   Test_LogLevel_Diff
    === RUN   Test_LogLevel_Diff/DebugLevel
    === RUN   Test_LogLevel_Diff/InfoLevel
    === RUN   Test_LogLevel_Diff/InfoWarnLevel
    === RUN   Test_LogLevel_Diff/WarnInfoLevel
    === RUN   Test_LogLevel_Diff/InfoTraceLevel
    === RUN   Test_LogLevel_Diff/TraceInfoLevel
    === RUN   Test_LogLevel_Diff/TraceLevel
    --- PASS: Test_LogLevel_Diff (0.00s)
        --- PASS: Test_LogLevel_Diff/DebugLevel (0.00s)
        --- PASS: Test_LogLevel_Diff/InfoLevel (0.00s)
        --- PASS: Test_LogLevel_Diff/InfoWarnLevel (0.00s)
        --- PASS: Test_LogLevel_Diff/WarnInfoLevel (0.00s)
        --- PASS: Test_LogLevel_Diff/InfoTraceLevel (0.00s)
        --- PASS: Test_LogLevel_Diff/TraceInfoLevel (0.00s)
        --- PASS: Test_LogLevel_Diff/TraceLevel (0.00s)
    PASS
    ok      github.com/defenseunicorns/maru-runner/src/message      0.235s
    ```
    
    ## Related
    
    - defenseunicorns/uds-cli#916
    
    ## Type of change
    
    - [x] Bug fix (non-breaking change which fixes an issue)
    - [x] New feature (non-breaking change which adds functionality)
    - [x] Other (security config, docs update, etc)
    
    ## Checklist before merging
    
    - [x] Test, docs, adr added or updated as needed
    - [x] [Contributor Guide
    Steps](https://github.com/defenseunicorns/maru-runner/blob/main/CONTRIBUTING.md)
    followed
    
    ---------
    
    Signed-off-by: catsby <clint@ctshryock.com>
    Co-authored-by: Wayne Starr <Racer159@users.noreply.github.com>
    Co-authored-by: Eric Wyles <23637493+ericwyles@users.noreply.github.com>
    3 people authored Sep 19, 2024
    Configuration menu
    Copy the full SHA
    414b787 View commit details
    Browse the repository at this point in the history

Commits on Sep 20, 2024

  1. fix(deps): update code-deps to v1.12.0 (#130)

    This PR contains the following updates:
    
    | Package | Change | Age | Adoption | Passing | Confidence |
    |---|---|---|---|---|---|
    | [github.com/goccy/go-yaml](https://togithub.com/goccy/go-yaml) |
    `v1.11.3` -> `v1.12.0` |
    [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoccy%2fgo-yaml/v1.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
    |
    [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fgoccy%2fgo-yaml/v1.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
    |
    [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fgoccy%2fgo-yaml/v1.11.3/v1.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
    |
    [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoccy%2fgo-yaml/v1.11.3/v1.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
    |
    
    ---
    
    ### Release Notes
    
    <details>
    <summary>goccy/go-yaml (github.com/goccy/go-yaml)</summary>
    
    ###
    [`v1.12.0`](https://togithub.com/goccy/go-yaml/releases/tag/v1.12.0):
    1.12.0
    
    [Compare
    Source](https://togithub.com/goccy/go-yaml/compare/v1.11.3...v1.12.0)
    
    #### What's Changed
    
    - Replace deprecated `io/ioutil` by
    [@&#8203;harryzcy](https://togithub.com/harryzcy) in
    [https://github.com/goccy/go-yaml/pull/429](https://togithub.com/goccy/go-yaml/pull/429)
    - support custom unmarshalling for map keys by
    [@&#8203;KSpaceer](https://togithub.com/KSpaceer) in
    [https://github.com/goccy/go-yaml/pull/453](https://togithub.com/goccy/go-yaml/pull/453)
    - trim right spaces before adding carriage return or linefeed by
    [@&#8203;mfleader](https://togithub.com/mfleader) in
    [https://github.com/goccy/go-yaml/pull/462](https://togithub.com/goccy/go-yaml/pull/462)
    - fix: Correct token.Tokenize double quoted strings with escape
    sequences handling by
    [@&#8203;nieomylnieja](https://togithub.com/nieomylnieja) in
    [https://github.com/goccy/go-yaml/pull/457](https://togithub.com/goccy/go-yaml/pull/457)
    - Fix decoding of scientific notation by
    [@&#8203;morris-kelly](https://togithub.com/morris-kelly) in
    [https://github.com/goccy/go-yaml/pull/463](https://togithub.com/goccy/go-yaml/pull/463)
    - Quote is required even if it begins with backquote. by
    [@&#8203;k1LoW](https://togithub.com/k1LoW) in
    [https://github.com/goccy/go-yaml/pull/440](https://togithub.com/goccy/go-yaml/pull/440)
    
    #### New Contributors
    
    - [@&#8203;harryzcy](https://togithub.com/harryzcy) made their first
    contribution in
    [https://github.com/goccy/go-yaml/pull/429](https://togithub.com/goccy/go-yaml/pull/429)
    - [@&#8203;KSpaceer](https://togithub.com/KSpaceer) made their first
    contribution in
    [https://github.com/goccy/go-yaml/pull/453](https://togithub.com/goccy/go-yaml/pull/453)
    - [@&#8203;mfleader](https://togithub.com/mfleader) made their first
    contribution in
    [https://github.com/goccy/go-yaml/pull/462](https://togithub.com/goccy/go-yaml/pull/462)
    - [@&#8203;nieomylnieja](https://togithub.com/nieomylnieja) made their
    first contribution in
    [https://github.com/goccy/go-yaml/pull/457](https://togithub.com/goccy/go-yaml/pull/457)
    - [@&#8203;morris-kelly](https://togithub.com/morris-kelly) made their
    first contribution in
    [https://github.com/goccy/go-yaml/pull/463](https://togithub.com/goccy/go-yaml/pull/463)
    
    **Full Changelog**:
    goccy/go-yaml@v1.11.3...v1.11.4
    
    </details>
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - "after 12pm every weekday,before 11am
    every weekday" in timezone America/New_York, Automerge - At any time (no
    schedule defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you
    are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
    rebase/retry checkbox.
    
    🔕 **Ignore**: Close this PR and you won't be reminded about this update
    again.
    
    ---
    
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
    this box
    
    ---
    
    This PR was generated by [Mend Renovate](https://mend.io/renovate/).
    View the [repository job
    log](https://developer.mend.io/github/defenseunicorns/maru-runner).
    
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MzEuNCIsInVwZGF0ZWRJblZlciI6IjM4LjU2LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImNvZGUtZGVwcyJdfQ==-->
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    Co-authored-by: Wayne Starr <Racer159@users.noreply.github.com>
    renovate[bot] and Racer159 authored Sep 20, 2024
    Configuration menu
    Copy the full SHA
    2dc532b View commit details
    Browse the repository at this point in the history
  2. fix: pattern not properly being checked (#145)

    ## Description
    
    This fixes a bug where pattern is not checked when a variable is set to
    a value
    
    ## Related Issue
    
    Fixes #N/A
    
    ## Type of change
    
    - [X] Bug fix (non-breaking change which fixes an issue)
    - [ ] New feature (non-breaking change which adds functionality)
    - [ ] Other (security config, docs update, etc)
    
    ## Checklist before merging
    
    - [X] Test, docs, adr added or updated as needed
    - [X] [Contributor Guide
    Steps](https://github.com/defenseunicorns/maru-runner/blob/main/CONTRIBUTING.md)
    followed
    Racer159 authored Sep 20, 2024
    Configuration menu
    Copy the full SHA
    d4fa708 View commit details
    Browse the repository at this point in the history
  3. chore(deps): update maru support dependencies (#128)

    This PR contains the following updates:
    
    | Package | Type | Update | Change |
    |---|---|---|---|
    |
    [actions/create-github-app-token](https://redirect.github.com/actions/create-github-app-token)
    | action | minor | `v1.10.3` -> `v1.11.0` |
    | [actions/setup-node](https://redirect.github.com/actions/setup-node) |
    action | patch | `v4.0.3` -> `v4.0.4` |
    |
    [actions/upload-artifact](https://redirect.github.com/actions/upload-artifact)
    | action | minor | `v4.3.4` -> `v4.4.0` |
    | [anchore/sbom-action](https://redirect.github.com/anchore/sbom-action)
    | action | minor | `v0.16.1` -> `v0.17.2` |
    |
    [docker/setup-buildx-action](https://redirect.github.com/docker/setup-buildx-action)
    | action | minor | `v3.4.0` -> `n/a` |
    |
    [github/codeql-action](https://redirect.github.com/github/codeql-action)
    | action | minor | `v3.25.12` -> `v3.26.8` |
    | morphy/revive-action | docker | digest | `087d4e6` -> `540bffd` |
    |
    [ossf/scorecard-action](https://redirect.github.com/ossf/scorecard-action)
    | action | minor | `v2.3.3` -> `v2.4.0` |
    |
    [sigstore/cosign-installer](https://redirect.github.com/sigstore/cosign-installer)
    | action | minor | `v3.5.0` -> `n/a` |
    | [zarf-dev/zarf](https://redirect.github.com/zarf-dev/zarf) | | minor |
    `v0.39.0` -> `v0.40.1` |
    
    ---
    
    ### Release Notes
    
    <details>
    <summary>actions/create-github-app-token
    (actions/create-github-app-token)</summary>
    
    ###
    [`v1.11.0`](https://redirect.github.com/actions/create-github-app-token/releases/tag/v1.11.0)
    
    [Compare
    Source](https://redirect.github.com/actions/create-github-app-token/compare/v1.10.4...v1.11.0)
    
    ##### What's Changed
    
    ##### Features
    
    - Allow repositories input to be comma or newline-separated by
    [@&#8203;peter-evans](https://redirect.github.com/peter-evans) in
    [https://github.com/actions/create-github-app-token/pull/169](https://redirect.github.com/actions/create-github-app-token/pull/169)
    
    ##### New Contributors
    
    - [@&#8203;peter-evans](https://redirect.github.com/peter-evans) made
    their first contribution in
    [https://github.com/actions/create-github-app-token/pull/169](https://redirect.github.com/actions/create-github-app-token/pull/169)
    
    **Full Changelog**:
    actions/create-github-app-token@v1.10.4...v1.11.0
    
    ###
    [`v1.10.4`](https://redirect.github.com/actions/create-github-app-token/releases/tag/v1.10.4)
    
    [Compare
    Source](https://redirect.github.com/actions/create-github-app-token/compare/v1.10.3...v1.10.4)
    
    ##### Bug Fixes
    
    - **deps:** bump the production-dependencies group across 1 directory
    with 3 updates
    ([#&#8203;166](https://redirect.github.com/actions/create-github-app-token/issues/166))
    ([e177c20](https://redirect.github.com/actions/create-github-app-token/commit/e177c20e0f736e68f4a37ffee6aa32c73da13988)),
    closes
    [#&#8203;641](https://redirect.github.com/actions/create-github-app-token/issues/641)
    [#&#8203;641](https://redirect.github.com/actions/create-github-app-token/issues/641)
    [#&#8203;639](https://redirect.github.com/actions/create-github-app-token/issues/639)
    [#&#8203;638](https://redirect.github.com/actions/create-github-app-token/issues/638)
    [#&#8203;637](https://redirect.github.com/actions/create-github-app-token/issues/637)
    [#&#8203;636](https://redirect.github.com/actions/create-github-app-token/issues/636)
    [#&#8203;633](https://redirect.github.com/actions/create-github-app-token/issues/633)
    [#&#8203;632](https://redirect.github.com/actions/create-github-app-token/issues/632)
    [#&#8203;631](https://redirect.github.com/actions/create-github-app-token/issues/631)
    [#&#8203;630](https://redirect.github.com/actions/create-github-app-token/issues/630)
    [#&#8203;629](https://redirect.github.com/actions/create-github-app-token/issues/629)
    [#&#8203;714](https://redirect.github.com/actions/create-github-app-token/issues/714)
    [#&#8203;711](https://redirect.github.com/actions/create-github-app-token/issues/711)
    [#&#8203;714](https://redirect.github.com/actions/create-github-app-token/issues/714)
    [#&#8203;716](https://redirect.github.com/actions/create-github-app-token/issues/716)
    [#&#8203;711](https://redirect.github.com/actions/create-github-app-token/issues/711)
    [#&#8203;712](https://redirect.github.com/actions/create-github-app-token/issues/712)
    [#&#8203;710](https://redirect.github.com/actions/create-github-app-token/issues/710)
    [#&#8203;709](https://redirect.github.com/actions/create-github-app-token/issues/709)
    [#&#8203;708](https://redirect.github.com/actions/create-github-app-token/issues/708)
    [#&#8203;702](https://redirect.github.com/actions/create-github-app-token/issues/702)
    [#&#8203;706](https://redirect.github.com/actions/create-github-app-token/issues/706)
    [#&#8203;3458](https://redirect.github.com/actions/create-github-app-token/issues/3458)
    [#&#8203;3461](https://redirect.github.com/actions/create-github-app-token/issues/3461)
    [#&#8203;3460](https://redirect.github.com/actions/create-github-app-token/issues/3460)
    [#&#8203;3454](https://redirect.github.com/actions/create-github-app-token/issues/3454)
    [#&#8203;3450](https://redirect.github.com/actions/create-github-app-token/issues/3450)
    [#&#8203;3445](https://redirect.github.com/actions/create-github-app-token/issues/3445)
    
    </details>
    
    <details>
    <summary>actions/setup-node (actions/setup-node)</summary>
    
    ###
    [`v4.0.4`](https://redirect.github.com/actions/setup-node/compare/v4.0.3...v4.0.4)
    
    [Compare
    Source](https://redirect.github.com/actions/setup-node/compare/v4.0.3...v4.0.4)
    
    </details>
    
    <details>
    <summary>actions/upload-artifact (actions/upload-artifact)</summary>
    
    ###
    [`v4.4.0`](https://redirect.github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0)
    
    [Compare
    Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.6...v4.4.0)
    
    ###
    [`v4.3.6`](https://redirect.github.com/actions/upload-artifact/compare/v4.3.5...v4.3.6)
    
    [Compare
    Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.5...v4.3.6)
    
    ###
    [`v4.3.5`](https://redirect.github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5)
    
    [Compare
    Source](https://redirect.github.com/actions/upload-artifact/compare/v4.3.4...v4.3.5)
    
    </details>
    
    <details>
    <summary>anchore/sbom-action (anchore/sbom-action)</summary>
    
    ###
    [`v0.17.2`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.2)
    
    [Compare
    Source](https://redirect.github.com/anchore/sbom-action/compare/v0.17.1...v0.17.2)
    
    #### Changes in v0.17.2
    
    - Update Syft to v1.11.1
    ([#&#8203;485](https://redirect.github.com/anchore/sbom-action/issues/485))
    \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)]
    
    ###
    [`v0.17.1`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.1)
    
    [Compare
    Source](https://redirect.github.com/anchore/sbom-action/compare/v0.17.0...v0.17.1)
    
    #### Changes in v0.17.1
    
    - chore(deps): update Syft to v1.11.0
    ([#&#8203;483](https://redirect.github.com/anchore/sbom-action/issues/483))
    \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)]
    
    ###
    [`v0.17.0`](https://redirect.github.com/anchore/sbom-action/releases/tag/v0.17.0)
    
    [Compare
    Source](https://redirect.github.com/anchore/sbom-action/compare/v0.16.1...v0.17.0)
    
    #### Changes in v0.17.0
    
    - chore(deps): update Syft to v1.9.0
    ([#&#8203;479](https://redirect.github.com/anchore/sbom-action/issues/479))
    \[[anchore-actions-token-generator](https://redirect.github.com/anchore-actions-token-generator)]
    
    </details>
    
    <details>
    <summary>docker/setup-buildx-action
    (docker/setup-buildx-action)</summary>
    
    ###
    [`v3.6.1`](https://redirect.github.com/docker/setup-buildx-action/releases/tag/v3.6.1)
    
    [Compare
    Source](https://redirect.github.com/docker/setup-buildx-action/compare/v3.6.0...v3.6.1)
    
    - Check for malformed docker context by
    [@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
    [https://github.com/docker/setup-buildx-action/pull/347](https://redirect.github.com/docker/setup-buildx-action/pull/347)
    
    **Full Changelog**:
    docker/setup-buildx-action@v3.6.0...v3.6.1
    
    ###
    [`v3.6.0`](https://redirect.github.com/docker/setup-buildx-action/releases/tag/v3.6.0)
    
    [Compare
    Source](https://redirect.github.com/docker/setup-buildx-action/compare/v3.5.0...v3.6.0)
    
    - Create temp docker context if default one has TLS data loaded before
    creating a container builder by
    [@&#8203;crazy-max](https://redirect.github.com/crazy-max) in
    [https://github.com/docker/setup-buildx-action/pull/341](https://redirect.github.com/docker/setup-buildx-action/pull/341)
    
    **Full Changelog**:
    docker/setup-buildx-action@v3.5.0...v3.6.0
    
    ###
    [`v3.5.0`](https://redirect.github.com/docker/setup-buildx-action/compare/v3.4.0...v3.5.0)
    
    [Compare
    Source](https://redirect.github.com/docker/setup-buildx-action/compare/v3.4.0...v3.5.0)
    
    </details>
    
    <details>
    <summary>github/codeql-action (github/codeql-action)</summary>
    
    ###
    [`v3.26.8`](https://redirect.github.com/github/codeql-action/compare/v3.26.7...v3.26.8)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.26.7...v3.26.8)
    
    ###
    [`v3.26.7`](https://redirect.github.com/github/codeql-action/compare/v3.26.6...v3.26.7)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.26.6...v3.26.7)
    
    ###
    [`v3.26.6`](https://redirect.github.com/github/codeql-action/compare/v3.26.5...v3.26.6)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.26.5...v3.26.6)
    
    ###
    [`v3.26.5`](https://redirect.github.com/github/codeql-action/compare/v3.26.4...v3.26.5)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.26.4...v3.26.5)
    
    ###
    [`v3.26.4`](https://redirect.github.com/github/codeql-action/compare/v3.26.3...v3.26.4)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.26.3...v3.26.4)
    
    ###
    [`v3.26.3`](https://redirect.github.com/github/codeql-action/compare/v3.26.2...v3.26.3)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.26.2...v3.26.3)
    
    ###
    [`v3.26.2`](https://redirect.github.com/github/codeql-action/compare/v3.26.1...v3.26.2)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.26.1...v3.26.2)
    
    ###
    [`v3.26.1`](https://redirect.github.com/github/codeql-action/compare/v3.26.0...v3.26.1)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.26.0...v3.26.1)
    
    ###
    [`v3.26.0`](https://redirect.github.com/github/codeql-action/compare/v3.25.15...v3.26.0)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.25.15...v3.26.0)
    
    ###
    [`v3.25.15`](https://redirect.github.com/github/codeql-action/compare/v3.25.14...v3.25.15)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.25.14...v3.25.15)
    
    ###
    [`v3.25.14`](https://redirect.github.com/github/codeql-action/compare/v3.25.13...v3.25.14)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.25.13...v3.25.14)
    
    ###
    [`v3.25.13`](https://redirect.github.com/github/codeql-action/compare/v3.25.12...v3.25.13)
    
    [Compare
    Source](https://redirect.github.com/github/codeql-action/compare/v3.25.12...v3.25.13)
    
    </details>
    
    <details>
    <summary>ossf/scorecard-action (ossf/scorecard-action)</summary>
    
    ###
    [`v2.4.0`](https://redirect.github.com/ossf/scorecard-action/releases/tag/v2.4.0)
    
    [Compare
    Source](https://redirect.github.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0)
    
    #### What's Changed
    
    This update bumps the Scorecard version to the v5 release. For a
    complete list of changes, please refer to the [v5.0.0 release
    notes](https://redirect.github.com/ossf/scorecard/releases/tag/v5.0.0).
    Of special note to Scorecard Action is the Maintainer Annotation
    feature, which can be used to suppress some Code Scanning false
    positives. Alerts will not be generated for any Scorecard Check with an
    annotation.
    
    - 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0
    by [@&#8203;spencerschrock](https://redirect.github.com/spencerschrock)
    in
    [https://github.com/ossf/scorecard-action/pull/1410](https://redirect.github.com/ossf/scorecard-action/pull/1410)
    - 🐛 lower license sarif alert threshold to 9 by
    [@&#8203;spencerschrock](https://redirect.github.com/spencerschrock) in
    [https://github.com/ossf/scorecard-action/pull/1411](https://redirect.github.com/ossf/scorecard-action/pull/1411)
    
    ##### Documentation
    
    - docs: dogfooding badge by
    [@&#8203;jkowalleck](https://redirect.github.com/jkowalleck) in
    [https://github.com/ossf/scorecard-action/pull/1399](https://redirect.github.com/ossf/scorecard-action/pull/1399)
    
    #### New Contributors
    
    - [@&#8203;jkowalleck](https://redirect.github.com/jkowalleck) made
    their first contribution in
    [https://github.com/ossf/scorecard-action/pull/1399](https://redirect.github.com/ossf/scorecard-action/pull/1399)
    
    **Full Changelog**:
    ossf/scorecard-action@v2.3.3...v2.4.0
    
    </details>
    
    <details>
    <summary>sigstore/cosign-installer (sigstore/cosign-installer)</summary>
    
    ###
    [`v3.6.0`](https://redirect.github.com/sigstore/cosign-installer/releases/tag/v3.6.0)
    
    [Compare
    Source](https://redirect.github.com/sigstore/cosign-installer/compare/v3.5.0...v3.6.0)
    
    #### What's Changed
    
    - Bump actions/checkout from 4.1.2 to 4.1.3 by
    [@&#8203;dependabot](https://redirect.github.com/dependabot) in
    [https://github.com/sigstore/cosign-installer/pull/161](https://redirect.github.com/sigstore/cosign-installer/pull/161)
    - Bump actions/checkout from 4.1.3 to 4.1.4 by
    [@&#8203;dependabot](https://redirect.github.com/dependabot) in
    [https://github.com/sigstore/cosign-installer/pull/162](https://redirect.github.com/sigstore/cosign-installer/pull/162)
    - Bump actions/setup-go from 5.0.0 to 5.0.1 by
    [@&#8203;dependabot](https://redirect.github.com/dependabot) in
    [https://github.com/sigstore/cosign-installer/pull/163](https://redirect.github.com/sigstore/cosign-installer/pull/163)
    - Bump actions/checkout from 4.1.4 to 4.1.5 by
    [@&#8203;dependabot](https://redirect.github.com/dependabot) in
    [https://github.com/sigstore/cosign-installer/pull/164](https://redirect.github.com/sigstore/cosign-installer/pull/164)
    - Bump actions/checkout from 4.1.5 to 4.1.6 by
    [@&#8203;dependabot](https://redirect.github.com/dependabot) in
    [https://github.com/sigstore/cosign-installer/pull/165](https://redirect.github.com/sigstore/cosign-installer/pull/165)
    - Bump actions/checkout from 4.1.6 to 4.1.7 by
    [@&#8203;dependabot](https://redirect.github.com/dependabot) in
    [https://github.com/sigstore/cosign-installer/pull/166](https://redirect.github.com/sigstore/cosign-installer/pull/166)
    - Bump actions/setup-go from 5.0.1 to 5.0.2 by
    [@&#8203;dependabot](https://redirect.github.com/dependabot) in
    [https://github.com/sigstore/cosign-installer/pull/167](https://redirect.github.com/sigstore/cosign-installer/pull/167)
    - pin public key used for verification by
    [@&#8203;bobcallaway](https://redirect.github.com/bobcallaway) in
    [https://github.com/sigstore/cosign-installer/pull/169](https://redirect.github.com/sigstore/cosign-installer/pull/169)
    - bump default version to v2.4.0 release by
    [@&#8203;bobcallaway](https://redirect.github.com/bobcallaway) in
    [https://github.com/sigstore/cosign-installer/pull/168](https://redirect.github.com/sigstore/cosign-installer/pull/168)
    - update readme for new release by
    [@&#8203;bobcallaway](https://redirect.github.com/bobcallaway) in
    [https://github.com/sigstore/cosign-installer/pull/170](https://redirect.github.com/sigstore/cosign-installer/pull/170)
    
    **Full Changelog**:
    sigstore/cosign-installer@v3...v3.6.0
    
    </details>
    
    <details>
    <summary>zarf-dev/zarf (zarf-dev/zarf)</summary>
    
    ###
    [`v0.40.1`](https://redirect.github.com/zarf-dev/zarf/compare/v0.40.0...v0.40.1)
    
    [Compare
    Source](https://redirect.github.com/zarf-dev/zarf/compare/v0.40.0...v0.40.1)
    
    ###
    [`v0.40.0`](https://redirect.github.com/zarf-dev/zarf/compare/v0.39.0...v0.40.0)
    
    [Compare
    Source](https://redirect.github.com/zarf-dev/zarf/compare/v0.39.0...v0.40.0)
    
    </details>
    
    ---
    
    ### Configuration
    
    📅 **Schedule**: Branch creation - "after 12pm every weekday,before 11am
    every weekday" in timezone America/New_York, Automerge - At any time (no
    schedule defined).
    
    🚦 **Automerge**: Disabled by config. Please merge this manually once you
    are satisfied.
    
    ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
    rebase/retry checkbox.
    
    👻 **Immortal**: This PR will be recreated if closed unmerged. Get
    [config
    help](https://redirect.github.com/renovatebot/renovate/discussions) if
    that's undesired.
    
    ---
    
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
    this box
    
    ---
    
    This PR was generated by [Mend Renovate](https://mend.io/renovate/).
    View the [repository job
    log](https://developer.mend.io/github/defenseunicorns/maru-runner).
    
    <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40MzEuNCIsInVwZGF0ZWRJblZlciI6IjM4LjgwLjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInN1cHBvcnQtZGVwcyJdfQ==-->
    
    ---------
    
    Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
    Co-authored-by: Wayne Starr <me@racer159.com>
    renovate[bot] and Racer159 authored Sep 20, 2024
    Configuration menu
    Copy the full SHA
    5062dc5 View commit details
    Browse the repository at this point in the history
  4. feat: allow direct calling of tasks with inputs when required inputs …

    …have default values (#146)
    
    ## Description
    allow direct calling of tasks with inputs when required inputs have default values
    
    ## Related Issue
    
    ## Type of change
    
    - [ ] Bug fix (non-breaking change which fixes an issue)
    - [x] New feature (non-breaking change which adds functionality)
    - [ ] Other (security config, docs update, etc)
    
    ## Checklist before merging
    
    - [x] Test, docs, adr added or updated as needed
    - [x] [Contributor Guide
    Steps](https://github.com/defenseunicorns/maru-runner/blob/main/CONTRIBUTING.md)
    followed
    zachariahmiller authored Sep 20, 2024
    Configuration menu
    Copy the full SHA
    73fcda7 View commit details
    Browse the repository at this point in the history
Loading