From 2aefd4f7e9269336d1c4c122d175a2d96be6eb41 Mon Sep 17 00:00:00 2001 From: Jannik Fried Date: Wed, 27 May 2026 11:03:54 +0200 Subject: [PATCH 1/5] Updates Go Version and adapts SNAPSHOT Workflow (#8) --- .github/workflows/docker-snapshot.yml | 17 ++++++++++-- .github/workflows/go-tests.yml | 26 +++++++++---------- cmd/aasenvironmentservice/Dockerfile | 2 +- cmd/aasregistryservice/Dockerfile | 2 +- cmd/aasrepositoryservice/Dockerfile | 2 +- cmd/aasxfileserverservice/Dockerfile | 2 +- cmd/basyxconfigurationservice/Dockerfile | 2 +- cmd/companylookupservice/Dockerfile | 2 +- .../Dockerfile | 2 +- cmd/digitaltwinregistryservice/Dockerfile | 4 +-- cmd/discoveryservice/Dockerfile | 2 +- cmd/submodelregistryservice/Dockerfile | 2 +- cmd/submodelrepositoryservice/Dockerfile | 4 +-- .../delegated-operation-service/Dockerfile | 2 +- go.mod | 17 +++++++----- go.sum | 14 ++++++++++ 16 files changed, 66 insertions(+), 36 deletions(-) diff --git a/.github/workflows/docker-snapshot.yml b/.github/workflows/docker-snapshot.yml index 859848eac..33a148453 100644 --- a/.github/workflows/docker-snapshot.yml +++ b/.github/workflows/docker-snapshot.yml @@ -1,7 +1,10 @@ name: Docker Snapshot Build on: - push: + workflow_dispatch: + pull_request: + types: + - closed branches: - main paths: @@ -39,7 +42,17 @@ jobs: build-and-push: needs: guard - if: ${{ needs.guard.outputs.should-run == 'true' }} + if: > + ${{ + needs.guard.outputs.should-run == 'true' && + ( + github.event_name == 'workflow_dispatch' || + ( + github.event.pull_request.merged == true && + contains(github.event.pull_request.labels.*.name, 'docker-snapshot') + ) + ) + }} runs-on: ubuntu-latest timeout-minutes: 90 permissions: diff --git a/.github/workflows/go-tests.yml b/.github/workflows/go-tests.yml index 4535a61ea..cc68a6868 100644 --- a/.github/workflows/go-tests.yml +++ b/.github/workflows/go-tests.yml @@ -184,7 +184,7 @@ jobs: run: | cd internal/aasregistry/security_operator_tests go test -v - + aas-registry-security-filter-tests: name: AAS Registry Security Filter Tests runs-on: ubuntu-latest @@ -275,13 +275,13 @@ jobs: steps: - name: Check out code uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - + - name: Set up Go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c with: go-version-file: go.mod cache: true - + - name: Get dependencies run: go mod download @@ -295,10 +295,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out code - uses: actions/checkout@v6 + uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - name: Set up Go - uses: actions/setup-go@v6 + uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c with: go-version-file: go.mod cache: true @@ -373,20 +373,20 @@ jobs: run: | cd internal/digitaltwinregistry/tractus-x-integrationtests go test -v - + concept-description-repository-integration-tests: name: Concept Description Repository Integration Tests runs-on: ubuntu-latest steps: - name: Check out code uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - + - name: Set up Go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c with: go-version-file: go.mod cache: true - + - name: Get dependencies run: go mod download @@ -415,20 +415,20 @@ jobs: run: | cd internal/conceptdescriptionrepository/security_tests go test -v . - + submodel-registry-integration-tests: name: Submodel Registry Integration Tests runs-on: ubuntu-latest steps: - name: Check out code uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd - + - name: Set up Go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c with: go-version-file: go.mod cache: true - + - name: Get dependencies run: go mod download @@ -477,7 +477,7 @@ jobs: cd internal/smregistry/security_tests go test -v - + submodel-repository-security-tests: name: Submodel Repository Security Tests runs-on: ubuntu-latest @@ -497,7 +497,7 @@ jobs: run: | cd internal/submodelrepository/security_tests go test -v - + aas-repository-integration-tests: name: Asset Administration Shell Repository Integration Tests runs-on: ubuntu-latest diff --git a/cmd/aasenvironmentservice/Dockerfile b/cmd/aasenvironmentservice/Dockerfile index 075ffdc4c..0a7b59916 100644 --- a/cmd/aasenvironmentservice/Dockerfile +++ b/cmd/aasenvironmentservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder ARG VERSION=dev diff --git a/cmd/aasregistryservice/Dockerfile b/cmd/aasregistryservice/Dockerfile index b111b0b01..5beae5807 100644 --- a/cmd/aasregistryservice/Dockerfile +++ b/cmd/aasregistryservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder # Version argument for build-time injection ARG VERSION=dev diff --git a/cmd/aasrepositoryservice/Dockerfile b/cmd/aasrepositoryservice/Dockerfile index be7e90790..73e0a85ab 100644 --- a/cmd/aasrepositoryservice/Dockerfile +++ b/cmd/aasrepositoryservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder # Version argument for build-time injection ARG VERSION=dev diff --git a/cmd/aasxfileserverservice/Dockerfile b/cmd/aasxfileserverservice/Dockerfile index 0f3db7c03..17b5e0923 100644 --- a/cmd/aasxfileserverservice/Dockerfile +++ b/cmd/aasxfileserverservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder # Version argument for build-time injection ARG VERSION=dev diff --git a/cmd/basyxconfigurationservice/Dockerfile b/cmd/basyxconfigurationservice/Dockerfile index b2523f5fe..0013aecba 100644 --- a/cmd/basyxconfigurationservice/Dockerfile +++ b/cmd/basyxconfigurationservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder # Version argument for build-time injection ARG VERSION=dev diff --git a/cmd/companylookupservice/Dockerfile b/cmd/companylookupservice/Dockerfile index eded1fb20..7045719f5 100644 --- a/cmd/companylookupservice/Dockerfile +++ b/cmd/companylookupservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder # Version argument for build-time injection ARG VERSION=dev diff --git a/cmd/conceptdescriptionrepositoryservice/Dockerfile b/cmd/conceptdescriptionrepositoryservice/Dockerfile index 37365dfa1..d0b2e5df1 100644 --- a/cmd/conceptdescriptionrepositoryservice/Dockerfile +++ b/cmd/conceptdescriptionrepositoryservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder # Version argument for build-time injection ARG VERSION=dev diff --git a/cmd/digitaltwinregistryservice/Dockerfile b/cmd/digitaltwinregistryservice/Dockerfile index 9fdca6f96..67bf260ce 100644 --- a/cmd/digitaltwinregistryservice/Dockerfile +++ b/cmd/digitaltwinregistryservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder # Version argument for build-time injection ARG VERSION=dev @@ -51,4 +51,4 @@ CMD ["/app/digitaltwinregistryservice", "-config", "/config/config.yaml"] # Health check runs via healthprobe HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \ - CMD ["/bin/healthprobe"] \ No newline at end of file + CMD ["/bin/healthprobe"] diff --git a/cmd/discoveryservice/Dockerfile b/cmd/discoveryservice/Dockerfile index 81310f1b5..b05a1f7ed 100644 --- a/cmd/discoveryservice/Dockerfile +++ b/cmd/discoveryservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder # Version argument for build-time injection ARG VERSION=dev diff --git a/cmd/submodelregistryservice/Dockerfile b/cmd/submodelregistryservice/Dockerfile index 848bb52ad..7c0192014 100644 --- a/cmd/submodelregistryservice/Dockerfile +++ b/cmd/submodelregistryservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder # Version argument for build-time injection ARG VERSION=dev diff --git a/cmd/submodelrepositoryservice/Dockerfile b/cmd/submodelrepositoryservice/Dockerfile index 147e90de4..3ecf237b8 100644 --- a/cmd/submodelrepositoryservice/Dockerfile +++ b/cmd/submodelrepositoryservice/Dockerfile @@ -1,5 +1,5 @@ # Stage 1: Build the application -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder # Version argument for build-time injection ARG VERSION=dev @@ -51,4 +51,4 @@ CMD ["/app/submodelrepositoryservice", "-config", "/config/config.yaml"] # Health check runs via healthprobe HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \ - CMD ["/bin/healthprobe"] \ No newline at end of file + CMD ["/bin/healthprobe"] diff --git a/examples/BaSyxDelegatedOperationsExample/delegated-operation-service/Dockerfile b/examples/BaSyxDelegatedOperationsExample/delegated-operation-service/Dockerfile index fb1659d58..a9032e8c2 100644 --- a/examples/BaSyxDelegatedOperationsExample/delegated-operation-service/Dockerfile +++ b/examples/BaSyxDelegatedOperationsExample/delegated-operation-service/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.25.9-alpine AS builder +FROM golang:1.26.3-alpine AS builder WORKDIR /src COPY go.mod ./ diff --git a/go.mod b/go.mod index 62b0beefc..8022af32b 100644 --- a/go.mod +++ b/go.mod @@ -1,13 +1,13 @@ module github.com/eclipse-basyx/basyx-go-components -go 1.25.9 +go 1.26.3 require github.com/go-chi/chi/v5 v5.3.0 require ( github.com/DATA-DOG/go-sqlmock v1.5.2 github.com/aas-core-works/aas-core3.1-golang v1.0.0-rc1 - github.com/aas-core-works/aas-package3-golang v1.0.0-rc.2 + github.com/aas-core-works/aas-package3-golang v1.0.0-rc1 github.com/coreos/go-oidc v2.5.0+incompatible github.com/doug-martin/goqu/v9 v9.19.0 github.com/go-chi/cors v1.2.2 @@ -21,23 +21,26 @@ require ( require ( github.com/davecgh/go-spew v1.1.1 // indirect - github.com/fsnotify/fsnotify v1.9.0 // indirect + github.com/fsnotify/fsnotify v1.10.1 // indirect github.com/go-viper/mapstructure/v2 v2.5.0 // indirect + github.com/kr/pretty v0.3.1 // indirect + github.com/kr/text v0.2.0 // indirect github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect github.com/modern-go/reflect2 v1.0.2 // indirect - github.com/pelletier/go-toml/v2 v2.3.0 // indirect + github.com/pelletier/go-toml/v2 v2.3.1 // indirect github.com/pmezard/go-difflib v1.0.0 // indirect github.com/pquerna/cachecontrol v0.2.0 // indirect + github.com/rogpeppe/go-internal v1.9.0 // indirect github.com/sagikazarmark/locafero v0.12.0 // indirect github.com/spf13/afero v1.15.0 // indirect github.com/spf13/cast v1.10.0 // indirect github.com/spf13/pflag v1.0.10 // indirect github.com/subosito/gotenv v1.6.0 // indirect go.yaml.in/yaml/v3 v3.0.4 // indirect - golang.org/x/crypto v0.49.0 // indirect + golang.org/x/crypto v0.52.0 // indirect golang.org/x/oauth2 v0.36.0 // indirect - golang.org/x/sys v0.43.0 // indirect - golang.org/x/text v0.35.0 // indirect + golang.org/x/sys v0.45.0 // indirect + golang.org/x/text v0.37.0 // indirect gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c // indirect gopkg.in/yaml.v3 v3.0.1 // indirect ) diff --git a/go.sum b/go.sum index 045b38d8b..b8f6aa216 100644 --- a/go.sum +++ b/go.sum @@ -5,8 +5,11 @@ github.com/aas-core-works/aas-core3.1-golang v1.0.0-rc1 h1:53liY22USVfiZuLQoSQAl github.com/aas-core-works/aas-core3.1-golang v1.0.0-rc1/go.mod h1:/VkiKzedgGfMirWOqStE6QhRdzJgJBqW+4belc1/qZ8= github.com/aas-core-works/aas-package3-golang v1.0.0-rc.2 h1:l2ywUO73fdWmfMPaIuYsvfoDEq9oIjaieCLEfGvBb74= github.com/aas-core-works/aas-package3-golang v1.0.0-rc.2/go.mod h1:uDObjS4hNhBujH9L59QIAacokk7uAl9X0BbmNCkPtDs= +github.com/aas-core-works/aas-package3-golang v1.0.0-rc1 h1:GAlg0rFtHHmyoV6PF7RSUClLCz6rs0POxK5KySC1h9A= +github.com/aas-core-works/aas-package3-golang v1.0.0-rc1/go.mod h1:uDObjS4hNhBujH9L59QIAacokk7uAl9X0BbmNCkPtDs= github.com/coreos/go-oidc v2.5.0+incompatible h1:6W0vGJR3Tu0r0PwfmjOrRZSlfxeEln8dsejt3ZWIvwo= github.com/coreos/go-oidc v2.5.0+incompatible/go.mod h1:CgnwVTmzoESiwO9qyAFEMiHoZ1nMCKZlZ9V6mm3/LKc= +github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= @@ -17,6 +20,8 @@ github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHk github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0= github.com/fsnotify/fsnotify v1.9.0 h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k= github.com/fsnotify/fsnotify v1.9.0/go.mod h1:8jBTzvmWwFyi3Pb8djgCCO5IBqzKJ/Jwo8TRcHyHii0= +github.com/fsnotify/fsnotify v1.10.1 h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho= +github.com/fsnotify/fsnotify v1.10.1/go.mod h1:TLheqan6HD6GBK6PrDWyDPBaEV8LspOxvPSjC+bVfgo= github.com/go-chi/chi/v5 v5.3.0 h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM= github.com/go-chi/chi/v5 v5.3.0/go.mod h1:R+tYY2hNuVUUjxoPtqUdgBqevM9s9njzkTLutVsOCto= github.com/go-chi/cors v1.2.2 h1:Jmey33TE+b+rB7fT8MUy1u0I4L+NARQlK6LhzKPSyQE= @@ -49,6 +54,9 @@ github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9G github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk= github.com/pelletier/go-toml/v2 v2.3.0 h1:k59bC/lIZREW0/iVaQR8nDHxVq8OVlIzYCOJf421CaM= github.com/pelletier/go-toml/v2 v2.3.0/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY= +github.com/pelletier/go-toml/v2 v2.3.1 h1:MYEvvGnQjeNkRF1qUuGolNtNExTDwct51yp7olPtrEc= +github.com/pelletier/go-toml/v2 v2.3.1/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY= +github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA= github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/pquerna/cachecontrol v0.2.0 h1:vBXSNuE5MYP9IJ5kjsdo8uq+w41jSPgvba2DEnkRx9k= @@ -82,6 +90,8 @@ golang.org/x/crypto v0.0.0-20190325154230-a5d413f7728c/go.mod h1:djNgcEr1/C05ACk golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4= golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA= +golang.org/x/crypto v0.52.0 h1:RMs7fP2rXdep0CftQlK8Uf+kibLm7qkCcradZWYz988= +golang.org/x/crypto v0.52.0/go.mod h1:1QgfPxDqh0T2M/elOJtp9RvuR95kVjir0e6/BvEmGbc= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs= golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q= @@ -91,9 +101,13 @@ golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5h golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI= golang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= +golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY= +golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.35.0 h1:JOVx6vVDFokkpaq1AEptVzLTpDe9KGpj5tR4/X+ybL8= golang.org/x/text v0.35.0/go.mod h1:khi/HExzZJ2pGnjenulevKNX1W67CUy0AsXcNubPGCA= +golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc= +golang.org/x/text v0.37.0/go.mod h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c/go.mod h1:JHkPIbrfpd72SG/EVd6muEfDQjcINNoR0C8j2r3qZ4Q= From a399c6c98fbf0ac005ee1c716ce2c69b4f4fc94c Mon Sep 17 00:00:00 2001 From: FriedJannik Date: Wed, 27 May 2026 11:18:23 +0200 Subject: [PATCH 2/5] Update to latest aas-package3-golang --- go.mod | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/go.mod b/go.mod index 8022af32b..630147c46 100644 --- a/go.mod +++ b/go.mod @@ -7,7 +7,7 @@ require github.com/go-chi/chi/v5 v5.3.0 require ( github.com/DATA-DOG/go-sqlmock v1.5.2 github.com/aas-core-works/aas-core3.1-golang v1.0.0-rc1 - github.com/aas-core-works/aas-package3-golang v1.0.0-rc1 + github.com/aas-core-works/aas-package3-golang v1.0.0 github.com/coreos/go-oidc v2.5.0+incompatible github.com/doug-martin/goqu/v9 v9.19.0 github.com/go-chi/cors v1.2.2 @@ -30,7 +30,7 @@ require ( github.com/pelletier/go-toml/v2 v2.3.1 // indirect github.com/pmezard/go-difflib v1.0.0 // indirect github.com/pquerna/cachecontrol v0.2.0 // indirect - github.com/rogpeppe/go-internal v1.9.0 // indirect + github.com/rogpeppe/go-internal v1.14.1 // indirect github.com/sagikazarmark/locafero v0.12.0 // indirect github.com/spf13/afero v1.15.0 // indirect github.com/spf13/cast v1.10.0 // indirect From 995d2286d11f7337f4ac150085761d0f5dca7f67 Mon Sep 17 00:00:00 2001 From: FriedJannik Date: Wed, 27 May 2026 13:23:55 +0200 Subject: [PATCH 3/5] Fixes go mod --- go.mod | 2 -- go.sum | 22 ++++------------------ 2 files changed, 4 insertions(+), 20 deletions(-) diff --git a/go.mod b/go.mod index 630147c46..7a61db182 100644 --- a/go.mod +++ b/go.mod @@ -23,8 +23,6 @@ require ( github.com/davecgh/go-spew v1.1.1 // indirect github.com/fsnotify/fsnotify v1.10.1 // indirect github.com/go-viper/mapstructure/v2 v2.5.0 // indirect - github.com/kr/pretty v0.3.1 // indirect - github.com/kr/text v0.2.0 // indirect github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect github.com/modern-go/reflect2 v1.0.2 // indirect github.com/pelletier/go-toml/v2 v2.3.1 // indirect diff --git a/go.sum b/go.sum index b8f6aa216..f27c7a74e 100644 --- a/go.sum +++ b/go.sum @@ -3,13 +3,10 @@ github.com/DATA-DOG/go-sqlmock v1.5.2 h1:OcvFkGmslmlZibjAjaHm3L//6LiuBgolP7Oputl github.com/DATA-DOG/go-sqlmock v1.5.2/go.mod h1:88MAG/4G7SMwSE3CeA0ZKzrT5CiOU3OJ+JlNzwDqpNU= github.com/aas-core-works/aas-core3.1-golang v1.0.0-rc1 h1:53liY22USVfiZuLQoSQAlAKYkrMiV0g+aIw9hzH3EmA= github.com/aas-core-works/aas-core3.1-golang v1.0.0-rc1/go.mod h1:/VkiKzedgGfMirWOqStE6QhRdzJgJBqW+4belc1/qZ8= -github.com/aas-core-works/aas-package3-golang v1.0.0-rc.2 h1:l2ywUO73fdWmfMPaIuYsvfoDEq9oIjaieCLEfGvBb74= -github.com/aas-core-works/aas-package3-golang v1.0.0-rc.2/go.mod h1:uDObjS4hNhBujH9L59QIAacokk7uAl9X0BbmNCkPtDs= -github.com/aas-core-works/aas-package3-golang v1.0.0-rc1 h1:GAlg0rFtHHmyoV6PF7RSUClLCz6rs0POxK5KySC1h9A= -github.com/aas-core-works/aas-package3-golang v1.0.0-rc1/go.mod h1:uDObjS4hNhBujH9L59QIAacokk7uAl9X0BbmNCkPtDs= +github.com/aas-core-works/aas-package3-golang v1.0.0 h1:Q+iLgs28eOYjRbZ9YbkxNLb4vjC/9CA2TZFwFagjbN4= +github.com/aas-core-works/aas-package3-golang v1.0.0/go.mod h1:uDObjS4hNhBujH9L59QIAacokk7uAl9X0BbmNCkPtDs= github.com/coreos/go-oidc v2.5.0+incompatible h1:6W0vGJR3Tu0r0PwfmjOrRZSlfxeEln8dsejt3ZWIvwo= github.com/coreos/go-oidc v2.5.0+incompatible/go.mod h1:CgnwVTmzoESiwO9qyAFEMiHoZ1nMCKZlZ9V6mm3/LKc= -github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= @@ -18,8 +15,6 @@ github.com/doug-martin/goqu/v9 v9.19.0 h1:PD7t1X3tRcUiSdc5TEyOFKujZA5gs3VSA7wxSv github.com/doug-martin/goqu/v9 v9.19.0/go.mod h1:nf0Wc2/hV3gYK9LiyqIrzBEVGlI8qW3GuDCEobC4wBQ= github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8= github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0= -github.com/fsnotify/fsnotify v1.9.0 h1:2Ml+OJNzbYCTzsxtv8vKSFD9PbJjmhYF14k/jKC7S9k= -github.com/fsnotify/fsnotify v1.9.0/go.mod h1:8jBTzvmWwFyi3Pb8djgCCO5IBqzKJ/Jwo8TRcHyHii0= github.com/fsnotify/fsnotify v1.10.1 h1:b0/UzAf9yR5rhf3RPm9gf3ehBPpf0oZKIjtpKrx59Ho= github.com/fsnotify/fsnotify v1.10.1/go.mod h1:TLheqan6HD6GBK6PrDWyDPBaEV8LspOxvPSjC+bVfgo= github.com/go-chi/chi/v5 v5.3.0 h1:halUjDxhshgXHMrao5bB8eNBXo/rnzwr8m5m36glehM= @@ -52,17 +47,14 @@ github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q= github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M= github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk= -github.com/pelletier/go-toml/v2 v2.3.0 h1:k59bC/lIZREW0/iVaQR8nDHxVq8OVlIzYCOJf421CaM= -github.com/pelletier/go-toml/v2 v2.3.0/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY= github.com/pelletier/go-toml/v2 v2.3.1 h1:MYEvvGnQjeNkRF1qUuGolNtNExTDwct51yp7olPtrEc= github.com/pelletier/go-toml/v2 v2.3.1/go.mod h1:2gIqNv+qfxSVS7cM2xJQKtLSTLUE9V8t9Stt+h56mCY= -github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA= github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/pquerna/cachecontrol v0.2.0 h1:vBXSNuE5MYP9IJ5kjsdo8uq+w41jSPgvba2DEnkRx9k= github.com/pquerna/cachecontrol v0.2.0/go.mod h1:NrUG3Z7Rdu85UNR3vm7SOsl1nFIeSiQnrHV5K9mBcUI= -github.com/rogpeppe/go-internal v1.9.0 h1:73kH8U+JUqXU8lRuOHeVHaa/SZPifC7BkcraZVejAe8= -github.com/rogpeppe/go-internal v1.9.0/go.mod h1:WtVeX8xhTBvf0smdhujwtBcq4Qrzq/fJaraNFVN+nFs= +github.com/rogpeppe/go-internal v1.14.1 h1:UQB4HGPB6osV0SQTLymcB4TgvyWu6ZyliaW0tI/otEQ= +github.com/rogpeppe/go-internal v1.14.1/go.mod h1:MaRKkUm5W0goXpeCfT7UZI6fk/L7L7so1lCWt35ZSgc= github.com/sagikazarmark/locafero v0.12.0 h1:/NQhBAkUb4+fH1jivKHWusDYFjMOOKU88eegjfxfHb4= github.com/sagikazarmark/locafero v0.12.0/go.mod h1:sZh36u/YSZ918v0Io+U9ogLYQJ9tLLBmM4eneO6WwsI= github.com/spf13/afero v1.15.0 h1:b/YBCLWAJdFWJTN9cLhiXXcD7mzKn9Dm86dNnfyQw1I= @@ -88,8 +80,6 @@ go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20190325154230-a5d413f7728c/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= -golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4= -golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA= golang.org/x/crypto v0.52.0 h1:RMs7fP2rXdep0CftQlK8Uf+kibLm7qkCcradZWYz988= golang.org/x/crypto v0.52.0/go.mod h1:1QgfPxDqh0T2M/elOJtp9RvuR95kVjir0e6/BvEmGbc= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= @@ -99,13 +89,9 @@ golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4= golang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= -golang.org/x/sys v0.43.0 h1:Rlag2XtaFTxp19wS8MXlJwTvoh8ArU6ezoyFsMyCTNI= -golang.org/x/sys v0.43.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY= golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= -golang.org/x/text v0.35.0 h1:JOVx6vVDFokkpaq1AEptVzLTpDe9KGpj5tR4/X+ybL8= -golang.org/x/text v0.35.0/go.mod h1:khi/HExzZJ2pGnjenulevKNX1W67CUy0AsXcNubPGCA= golang.org/x/text v0.37.0 h1:Cqjiwd9eSg8e0QAkyCaQTNHFIIzWtidPahFWR83rTrc= golang.org/x/text v0.37.0/go.mod h1:a5sjxXGs9hsn/AJVwuElvCAo9v8QYLzvavO5z2PiM38= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= From a34f500cdf8cf1a01181749e883e91fb7cacbabb Mon Sep 17 00:00:00 2001 From: FriedJannik Date: Wed, 27 May 2026 15:38:46 +0200 Subject: [PATCH 4/5] Adapts Vuln Scan Workflow --- .github/workflows/vuln-scan.yml | 17 ++++------------- 1 file changed, 4 insertions(+), 13 deletions(-) diff --git a/.github/workflows/vuln-scan.yml b/.github/workflows/vuln-scan.yml index 4b7c8be49..f356ddf3d 100644 --- a/.github/workflows/vuln-scan.yml +++ b/.github/workflows/vuln-scan.yml @@ -1,6 +1,8 @@ name: Vulnerability Scan on: + release: + types: [published] pull_request: paths: - 'cmd/**' @@ -11,20 +13,9 @@ on: - '.github/workflows/vuln-scan.yml' - '.github/workflows/docker-release.yml' - '.github/workflows/docker-snapshot.yml' - push: - branches: - - main - paths: - - 'cmd/**' - - 'internal/**' - - 'database/**' - - 'go.mod' - - 'go.sum' - - '.github/workflows/vuln-scan.yml' - - '.github/workflows/docker-release.yml' - - '.github/workflows/docker-snapshot.yml' + workflow_dispatch: schedule: - - cron: '0 4 * * 1' + - cron: '0 4 */2 * *' concurrency: group: vuln-scan-${{ github.ref }} From 49f5963174f22146e8da7ee51859e9018a0b6907 Mon Sep 17 00:00:00 2001 From: FriedJannik Date: Thu, 28 May 2026 08:27:04 +0200 Subject: [PATCH 5/5] Updates SUPPLY_CHAIN_SECURITY.md --- docu/security/SUPPLY_CHAIN_SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docu/security/SUPPLY_CHAIN_SECURITY.md b/docu/security/SUPPLY_CHAIN_SECURITY.md index 9d71b8dd7..009d4d7ce 100644 --- a/docu/security/SUPPLY_CHAIN_SECURITY.md +++ b/docu/security/SUPPLY_CHAIN_SECURITY.md @@ -121,7 +121,7 @@ Release workflow enforces semantic version parsing from the Git tag. The repository provides a report-only Trivy workflow for continuous visibility. - Repository filesystem scans (`scan-type: fs`) cover source and dependency manifests. -- Container image scans (`scan-type: image`) build and scan each service image on `push` to `main` and on scheduled runs. +- Container image scans (`scan-type: image`) build and scan each service image on scheduled runs. - Findings are uploaded as SARIF. - Current mode does not fail builds. - Maintainers can later switch to fail on threshold (for example `HIGH,CRITICAL`) once baseline noise is reduced.