Commit Graph

181 Commits

Author SHA1 Message Date
Kovid Goyal
0ea65903b8 Revert "Increase minimum python version to 3.12"
This reverts commit 7004911271.
Dont need 3.12 anymore
2026-02-08 21:57:11 +05:30
Kovid Goyal
3839dcc082 Bump dependency for CVE 2026-02-07 14:41:17 +05:30
Kovid Goyal
0afe77ebc9 Ignore irrelevant CVE 2026-02-05 23:01:58 +05:30
Kovid Goyal
7004911271 Increase minimum python version to 3.12
Needed for PyErr_GetRaisedException

I could polyfill it, but cant be bothered. Python 3.12 is almost 3 years
old now. If somebody really, really needs older python support, PR
welcome.
2026-02-04 20:47:28 +05:30
Kovid Goyal
0267a02bb3 Ignore irrelevant python stdlib CVE 2026-02-03 14:48:30 +05:30
Kovid Goyal
cb53c41c7c ... 2026-01-28 09:40:15 +05:30
Kovid Goyal
ae36822837 Ignore a bunch of CVes in python that havent actually had their fixes released yet. 2026-01-23 19:07:02 +05:30
Kovid Goyal
e342f5ffab Ignore inapplicable CVE in python stdlib 2026-01-16 19:13:16 +05:30
Kovid Goyal
edd466e5f7 Pygments does not need type checking globally ignored anymore 2026-01-14 22:18:11 +05:30
Kovid Goyal
8a10931f0e Download grype from my own server
Far higher reliability than githubj;wq
2026-01-10 12:42:09 +05:30
Kovid Goyal
24b634ae1a Nicer 403 error andling when downloading grype 2026-01-02 11:35:28 +05:30
dependabot[bot]
232edb3ad3 Bump actions/cache from 4 to 5 in the actions group
Bumps the actions group with 1 update: [actions/cache](https://github.com/actions/cache).


Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

---
updated-dependencies:
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-22 03:22:12 +00:00
Kovid Goyal
f39183bd6b Ignore inapplicable CVE 2025-12-11 12:49:16 +05:30
Kovid Goyal
d87ba95d9c Ignore CVE-2025-13836
We dont care about this DoS enough, so ignore until a new version of
python 3.12 s released with the fix. Not updating past Python 3.12 for
this DoS.
2025-12-04 15:10:26 +05:30
dependabot[bot]
e69318e5fb Bump actions/checkout from 5 to 6 in the actions group
Bumps the actions group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-12-01 03:51:10 +00:00
Kovid Goyal
5f90102413 Add support for RAR archive preview 2025-11-27 09:33:15 +05:30
Kovid Goyal
0195f0f5f6 auto fixes to github actions by zizmor 2025-11-07 09:36:57 +05:30
Kovid Goyal
97b030edf7 Dont scan grype itself with grype 2025-11-02 15:41:01 +05:30
Kovid Goyal
d3ef27c2bc Update grype db as part of install 2025-10-17 10:59:11 +05:30
dependabot[bot]
6a6296a90f Bump github/codeql-action from 3 to 4 in the actions group
Bumps the actions group with 1 update: [github/codeql-action](https://github.com/github/codeql-action).


Updates `github/codeql-action` from 3 to 4
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/github/codeql-action/compare/v3...v4)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-10-13 03:41:50 +00:00
Kovid Goyal
0bfcffbaed Fix spurious CVE in dep detection 2025-10-11 13:23:33 +05:30
Kovid Goyal
3b0938e878 Run govulncheck on the binary and remove upload of SARIF to github as github doesnt like the SARIF govulncheck produces 2025-09-24 13:12:00 +05:30
Kovid Goyal
4771de3f95 Print out the govulncheck.sarif file in CI 2025-09-24 12:57:21 +05:30
Kovid Goyal
4ffacbbe80 Another try at running govulncheck 2025-09-24 12:50:06 +05:30
Kovid Goyal
3383675bb2 ... 2025-09-23 16:15:34 +05:30
Kovid Goyal
508b022721 Run dependency scanner CI job on schedule as well 2025-09-23 08:52:35 +05:30
Kovid Goyal
4e240b94e1 explicitly close opened url 2025-09-22 12:30:53 +05:30
Kovid Goyal
53e2f00473 A fancier download_with_retry function 2025-09-22 12:28:48 +05:30
Kovid Goyal
a05a56e413 use a retry for all downloads in CI script 2025-09-22 12:16:41 +05:30
Kovid Goyal
92ee52b68c Retry grype download on failure 2025-09-22 11:36:27 +05:30
Kovid Goyal
dfeef6df83 Ignore CVE that does not apply 2025-09-20 10:06:30 +05:30
Kovid Goyal
1672110854 Turn off CodeQL TRAP caching
It was using up the GitHub actions caching quota of 10GB
2025-09-19 22:53:14 +05:30
Kovid Goyal
54368be554 Fix grype not scanning C deps that dont have CPEs 2025-09-18 09:22:28 +05:30
Kovid Goyal
c30f8cec46 ... 2025-09-17 23:30:37 +05:30
Kovid Goyal
0eddbefda9 List vulnerabilities by CVE 2025-09-17 23:20:39 +05:30
Kovid Goyal
c4cb9cdbb7 Filter out another form of the same CVE 2025-09-17 23:14:40 +05:30
Kovid Goyal
87856efa49 Run grype against SBOM as well 2025-09-17 22:29:49 +05:30
Kovid Goyal
cf9b0da489 ... 2025-09-17 22:06:38 +05:30
Kovid Goyal
ebb7ccebd0 Add a check dependencies action
Use the gyre tool to scan all binaries and generate a report
2025-09-17 21:32:28 +05:30
Kovid Goyal
77fbd5beba Use CodeQL on github actions 2025-09-17 07:47:34 +05:30
Kovid Goyal
d647e21779 Use the bundle for CodeQL builds
Speeds up the dependency fetch and hopefully fixes the failure on macOS
2025-09-16 07:36:00 +05:30
Kovid Goyal
96253f4798 Also run CodeQL for C on macOS to improve coverage 2025-09-16 07:21:48 +05:30
Kovid Goyal
1d37ef84ce Run CodeQL analysis for different languages in parallel 2025-09-16 07:11:13 +05:30
dependabot[bot]
04a8a60a87 Bump the actions group with 4 updates
Bumps the actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-python](https://github.com/actions/setup-python), [actions/setup-go](https://github.com/actions/setup-go) and [actions/cache](https://github.com/actions/cache).


Updates `actions/checkout` from 3 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v5)

Updates `actions/setup-python` from 4 to 6
- [Release notes](https://github.com/actions/setup-python/releases)
- [Commits](https://github.com/actions/setup-python/compare/v4...v6)

Updates `actions/setup-go` from 3 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v3...v6)

Updates `actions/cache` from 3 to 4
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-python
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/cache
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
2025-09-15 06:26:51 +00:00
Kovid Goyal
8b946d906b Have dependabot update GitHub actions as well 2025-09-15 11:34:02 +05:30
Kovid Goyal
edfda1e7af Remove deprecated option from CodeQL setup 2025-04-20 15:51:29 +05:30
Kovid Goyal
9cea3fbcb8 Enable CodeQL for Go 2025-04-20 15:44:36 +05:30
Kovid Goyal
afe5877e6a Fix indentation in codeql yml file 2025-04-14 10:21:10 +05:30
Kovid Goyal
5382fa8692 Bump version of CodeQL actions
Version 2 is deprecated.

Fixes #8537
Fixes #8536
2025-04-14 08:09:31 +05:30
Galantsev, Dmitrii
4a8824c10e Fix bad code block formatting in docs
I noticed that
<https://sw.kovidgoyal.net/kitty/conf/#opt-kitty.text_fg_override_threshold>
said ':code:` ratio`' instead of being formatted as code. I assume
that's because of a space after `.

Fixed 2 cases where I found the issue.
Added a simple code block check to CI.

Signed-off-by: Galantsev, Dmitrii <dmitrii.galantsev@amd.com>
2025-03-30 17:48:12 -05:00