Commit 1fc6f580 authored by Pierre Smeyers's avatar Pierre Smeyers
Browse files

ci: upgrade templates

parent b5390b21
Loading
Loading
Loading
Loading
Loading
+3 −2
Original line number Diff line number Diff line
@@ -2,11 +2,11 @@
include:
  # Go template
  - project: "to-be-continuous/golang"
    ref: "4.0.1"
    ref: "4.4"
    file: "templates/gitlab-ci-golang.yml"
  # Docker template
  - project: "to-be-continuous/docker"
    ref: "5.2.0"
    ref: "5.2"
    file: "templates/gitlab-ci-docker.yml"

# your pipeline stages
@@ -29,6 +29,7 @@ variables:
  GO_BUILD_MODE: application

  DOCKER_BUILD_ARGS: "--build-arg CI_PROJECT_URL --build-arg DEFAULT_VAULT_URL"
  DOCKER_PROD_PUBLISH_STRATEGY: "auto"

# this job tests the Docker image on a remote Vault server (configurable)
test-on-remote:

SECURITY.md

0 → 100644
+14 −0
Original line number Diff line number Diff line
# Security Policy

## Supported Versions

Security fixes and updates are only applied to the latest released version. So always try to be up to date.

## Reporting a Vulnerability

In order to minimize risks of attack while investigating and fixing the issue, any vulnerability shall be reported by 
opening a [**confidential** issue on gitlab.com](https://gitlab.com/to-be-continuous/tools/vault-secrets-provider/-/issues/new?issue[confidential]=true&issue[description]=%28type+in+the+vulnerability+details+here%29%0A%0A%2Flabel%20~%22kind%3A%3Avulnerability%22).

Follow-up and fixing will be made on a _best effort_ basis.

If you have doubts about a potential vulnerability, please reach out one of the maintainers on Discord.