Merge branch 'main' into fix/gitlab-license-property

Author: Anni0506

.github/workflows/boilerplates.yaml

@@ -43,7 +43,7 @@ jobs:
       - name: Check out code
         uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
 
-      - uses: chainguard-dev/actions/boilerplate@e1c4977ad9cb32b12c5b222ec0134a22bec60bd5 # v1.6.25
+      - uses: chainguard-dev/actions/boilerplate@f0be69916b439d0fcced2451b23d0f27cd46d545 # v1.6.26
         with:
           extension: ${{ matrix.extension }}
           language: ${{ matrix.language }}

.github/workflows/chart-publish.yml

@@ -33,7 +33,7 @@ jobs:
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
-      - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
+      - uses: ko-build/setup-ko@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445 # v0.10
         with:
           version: v0.16.0
       - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1

.github/workflows/compose-migrate.yml

@@ -18,7 +18,7 @@ jobs:
         with:
           go-version-file: 'go.mod'
       - name: Install ko
-        uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
+        uses: ko-build/setup-ko@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445 # v0.10
         with:
           version: v0.16.0
       - name: Copy server-config.yaml

.github/workflows/image-build.yml

@@ -14,7 +14,7 @@ jobs:
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
-      - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
+      - uses: ko-build/setup-ko@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445 # v0.10
         with:
           version: v0.16.0
       - run: |
@@ -37,7 +37,7 @@ jobs:
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
         with:
           go-version-file: 'go.mod'
-      - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d # v0.9
+      - uses: ko-build/setup-ko@61b4d1d396f5b2e7d6bb6fefdce3dc38d1a13445 # v0.10
         with:
           version: v0.16.0
       - uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 # v5.0.1

.github/workflows/lint.yml

@@ -26,8 +26,9 @@ jobs:
           go-version-file: 'go.mod'
           cache: false
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1
+        uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
         with:
+          version: v2.11.4
           only-new-issues: true
 
   check-go-mod-tidy-and-make-gen:

.github/workflows/releaser.yml

@@ -60,7 +60,7 @@ jobs:
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
       - name: Run GoReleaser
         id: run-goreleaser
-        uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2
+        uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
         with:
           distribution: goreleaser
           version: "~> v2"

.github/workflows/scorecard.yml

@@ -36,6 +36,6 @@ jobs:
           retention-days: 5
 
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@c10b8064de6f491fea524254123dbe5e09572f13 #v4.35.1
+        uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a #v4.36.3
         with:
           sarif_file: results.sarif

.golangci.yml

@@ -42,8 +42,6 @@ linters:
     goconst:
       min-len: 6
       min-occurrences: 5
-      # Tests can be clearer with string literals
-      ignore-tests: true
     gocyclo:
       min-complexity: 15
     gosec:
@@ -85,6 +83,7 @@ linters:
     generated: lax
     rules:
       - linters:
+          - goconst
           - lll
           - gosec
         path: (.+)_test\.go

.goreleaser.yaml

@@ -17,7 +17,9 @@ before:
     - go generate ./...
 # This section defines the build matrix.
 builds:
-  - env:
+  - id: minder
+    binary: minder
+    env:
       - GO111MODULE=on
       - CGO_ENABLED=0
     flags:
@@ -37,6 +39,27 @@ builds:
       - amd64
       - arm64
     main: ./cmd/cli
+  - id: mindev
+    binary: mindev
+    env:
+      - GO111MODULE=on
+      - CGO_ENABLED=0
+    flags:
+      - -trimpath
+      - -tags=netgo
+    ldflags:
+      - "-X main.Version={{ .Env.VERSION }}"
+      - "-X main.Commit={{ .Env.COMMIT }}"
+      - "-X main.CommitDate={{ .Env.COMMIT_DATE }}"
+      - "-X main.TreeState={{ .Env.TREE_STATE }}"
+    goos:
+      - linux
+      - windows
+      - darwin
+    goarch:
+      - amd64
+      - arm64
+    main: ./cmd/dev
 # This section defines the release format.
 archives:
   - format: tar.gz # we can use binary, but it seems there's an issue where goreleaser skips the sboms

cmd/cli/app/ruletype/common.go

@@ -13,6 +13,8 @@ import (
 	"slices"
 	"strings"
 
+	"github.com/spf13/cobra"
+
 	"github.com/mindersec/minder/internal/util"
 	"github.com/mindersec/minder/internal/util/cli"
 	"github.com/mindersec/minder/internal/util/cli/table"
@@ -82,6 +84,12 @@ func validateFilesArg(files []string) error {
 	return nil
 }
 
+func printWarnings(cmd *cobra.Command, warnings []string) {
+	for _, warning := range warnings {
+		cmd.PrintErrf("Warning: %s\n", warning)
+	}
+}
+
 func shouldSkipFile(f string) bool {
 	// if the file is not json or yaml, skip it
 	// Get file extension