Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump e2e test tool versions #1183

Open
1 task
akashsinghal opened this issue Nov 20, 2023 · 5 comments
Open
1 task

Bump e2e test tool versions #1183

akashsinghal opened this issue Nov 20, 2023 · 5 comments
Assignees
Labels
enhancement New feature or request good first issue Good for newcomers
Milestone

Comments

@akashsinghal
Copy link
Collaborator

What would you like to be added?

The ratify e2e tests use a lot of different OSS tools for artifact creation such as notation, trivy, oras, etc. We should bump to latest stable version of these tools since many are now Stable/GA.

Updates to Makefile here: https://github.com/deislabs/ratify/blob/main/Makefile#L15-L44

Anything else you would like to add?

No response

Are you willing to submit PRs to contribute to this feature?

  • Yes, I am willing to implement it.
@akashsinghal akashsinghal added enhancement New feature or request triage Needs investigation good first issue Good for newcomers labels Nov 20, 2023
@susanshi susanshi added this to the Future milestone Nov 21, 2023
@susanshi susanshi removed the triage Needs investigation label Nov 21, 2023
@akashsinghal
Copy link
Collaborator Author

TODO: look into an automation strategy here. Can we leverage dependabot here?

@RyanTalbot
Copy link

Hey, looking to get involved with Ratify, I wouldn't mind picking this up to get my bearings. Are we still looking to implement this?

@binbin-li
Copy link
Collaborator

@RyanTalbot Hi Ryan, thanks for taking it! And there is community meeting on Weds 4:30-5:30pm (Pacific Time) if you'd like to join. https://github.com/deislabs/ratify?tab=readme-ov-file#community-meetings

@RyanTalbot
Copy link

Hey @binbin-li, no problem! Pacific Time isn't great for me (EU), but I'll try make it when I can to get involved!

@akashsinghal
Copy link
Collaborator Author

hey @RyanTalbot! I've sent a PR to update the tool versions to the current latest in #1326. We realized some of the tools were quite far out of date and now were affecting Ratify's integration test completeness. If you're still interested in this issue, this one is definitely not solved yet. We don't have an automated way of first figuring out there are new versions, and then sending a PR to update these dependencies automatically. Just one way I can think of doing this but open to any other option 😄

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request good first issue Good for newcomers
Projects
None yet
Development

No branches or pull requests

4 participants