My Activity in 2022-10

Blog posts

• 2022-10-10: aqua CLI Version Manager が checksum の検証をサポート

OSS Contribution

merged date	repository	lang	PR's short description
2022-10-21	slsa-framework/slsa-github-generator	go	fix: use GITHUB_OUTPUT instead of deprecated set-output command
2022-10-17	slsa-framework/slsa-github-generator	go	fix: use GITHUB_OUTPUT instead of deprecated set-output command
2022-10-04	shipyard-run/shipyard	go (shell script)	ci: fix checksums.txt

OSS Development

aqua

⭐ Over 200 stars ⭐

The notable change is the support of checksum verification.

Please see the GitHub Project to check prioritized issues.

• WIP
  • v1.22.0-1
    • 🚀 Support filtering packages with tags
  • #1306 Support restricting registries and packages globally for security
• v1.21.0
  • Support changing type in overrides
• v1.20.2
  • cp: Skip creating links
• v1.20.1
  • update-checksum: Fix the checksum of http package calculated by -deep option
• v1.20.0
  • 🎉 Support the checksum verification
  • 🎉 cp: Support coping all packages
• v1.19.5
  • nil check to avoid panic
  • Improve error log: Output download url when it failed to download a file

aqua-registry

🎉 Supported over 900 packages 🎉

🎉 30 Contributors 🎉

I've updated aqua-registry from v3.64.0 to v3.85.0. The number of packages has increased from 870 to 923 (+53). Thank you, all contributors!

tfaction

• v0.5.19
  • Use GITHUB_OUTPUT instead of deprecated set-output command (ref)
  • Replace https://github.com to $GITHUB_SERVER_URL for GitHub Enterprise

What I learned

I'm interested in the supply chain security and the improvement of local development and CI/CD pipeline.

• SLSA
  • https://zenn.dev/shunsuke_suzuki/scraps/68dc8e47093af6
• Development Containers
  • https://zenn.dev/shunsuke_suzuki/scraps/3910ea414e0c8d
• Dagger
• Earthly
  • The Platform Values of Earthly - The blog post is awesome
  • https://github.com/suzuki-shunsuke/example-earthly-terraform
  • https://zenn.dev/shunsuke_suzuki/scraps/5d1f5984defe9c
• ORAS

---

• https://zenn.dev/shunsuke_suzuki/scraps/eae73a2513d8c6

News

• GitHub Blog
  • GitHub Actions: Deprecating save-state and set-output commands
  • Dependabot now updates comments in GitHub Actions workflows referencing action versions
    • Renovate supports the similar feature
  • Introducing fine-grained personal access tokens for GitHub
  • New Branch Protections: Last Pusher and Locked Branch
• The bug of GitHub Actions GITHUB_STEP_SUMMARY has been fixed
  • https://twitter.com/szkdash/status/1568607299266281475
• Your CI pipelines should be code: introducing the Dagger Go SDK
• Docker Hub: October 2022 Pricing Change FAQ
• GCP IAM's Deny Policies has become GA finally
• ［速報］Google Cloud、「Cloud Workstations」発表。セキュアな開発環境一式をマネージドサービスで提供。Google Cloud Next '22

Others

GitHub Copilot's License issue

Tekton's Hermetic Execution Mode

Markdown Style Guide

• https://github.com/markdownlint/markdownlint/blob/main/docs/RULES.md#md014---dollar-signs-used-before-commands-without-showing-output
• https://cirosantilli.com/markdown-style-guide/#dollar-signs-in-shell-code
• https://arcticicestudio.github.io/styleguide-markdown/rules/code.html#no-shell-code-dollar-sign