Version 0.48.0-RC1

.github/workflows/build.yml

@@ -36,11 +36,12 @@ jobs:
     strategy:
       matrix:
         go-version:
-          - 1.22.x
+          - 1.22.12
         sys:
           - {os: ubuntu-latest}
-          - {os: macos-12, shell: zsh}
+          - {os: macos-13, shell: zsh}
           - {os: windows-2019}
+          - {os: ubuntu-24.04-arm}
       fail-fast: false
     runs-on: ${{ matrix.sys.os }}
     env:
@@ -74,19 +75,30 @@ jobs:
 
       # === Install gotestfmt ===
       - name: Set up gotestfmt
-        uses: gotesttools/gotestfmt-action@v2
-        with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+        shell: bash
+        run: go install github.com/gotesttools/gotestfmt/v2/cmd/gotestfmt@latest
 
       - # === Install State Tool ===
         name: Install State Tool
         uses: ActiveState/setup-state-tool@v1
+        if: "!contains(matrix.sys.os, 'arm')"
+
+      - # === Install State Tool (ARM64) ===
+        name: Install State Tool (ARM64)
+        if: contains(matrix.sys.os, 'arm')
+        shell: bash
+        run: |
+          ./installers/install.sh -b beta
+          echo "$HOME/.local/ActiveState/StateTool/beta/bin" >> $GITHUB_PATH
+          "$HOME/.local/ActiveState/StateTool/beta/bin/state" config set optin.unstable true
 
       - # === Setup ===
         name: Setup
         shell: bash
         run: |
-          bin=$(pwd)/.github/deps/${{ runner.os }}/bin
+          arch="amd64"
+          if [[ ${{ contains(matrix.sys.os, 'arm') }} = true ]]; then arch="arm64"; fi
+          bin=$(pwd)/.github/deps/${{ runner.os }}/$arch/bin
           echo "Adding $bin to PATH"
           echo "$bin" >> $GITHUB_PATH
 
@@ -125,7 +137,6 @@ jobs:
         shell: bash
         timeout-minutes: 15
         run: |
-          export PATH="$(pwd)/.github/deps/${{ runner.os }}/bin:$PATH"
           parallelize "$(cat <<'EOF'
           [
             {
@@ -262,7 +273,7 @@ jobs:
 
       - # === Configure AWS credentials ==
         name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@v4
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
           role-session-name: ${{ env.AWS_ROLE_SESSION_NAME }}
@@ -325,6 +336,10 @@ jobs:
             fi
           else
             TEST_SUITE_TAGS="all"
+            if [[ ${{ contains(matrix.sys.os, 'arm') }} = true ]]; then
+              echo "Skipping integration tests on ARM"
+              exit 0
+            fi
           fi
 
           echo "Running integration tests with tags: $TEST_SUITE_TAGS (empty means every test not specifically tagged)"
@@ -410,7 +425,6 @@ jobs:
           merge-multiple: true
 
       - name: Scan for CVEs
-        if: runner.os == 'Linux'
         uses: aquasecurity/[email protected]
         env:
           TRIVY_DB_REPOSITORY: ghcr.io/aquasecurity/trivy-db,public.ecr.aws/aquasecurity/trivy-db
@@ -483,7 +497,7 @@ jobs:
 
       - # === Configure AWS credentials ==
         name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v2
+        uses: aws-actions/configure-aws-credentials@v4
         with:
           role-to-assume: ${{ secrets.AWS_ROLE_TO_ASSUME }}
           role-session-name: ${{ env.AWS_ROLE_SESSION_NAME }}
@@ -511,10 +525,4 @@ jobs:
             session-build-ubuntu-20.04
             session-build-macos-11
             session-build-windows-2019
-
-      - # === Upload Artifacts ===
-        name: Upload Artifacts
-        uses: actions/upload-artifact@v4
-        with:
-          name: build
-          path: build/
+            session-build-ubuntu-24.04-arm

.github/workflows/scan.yml

@@ -0,0 +1,44 @@
+name: Scan
+
+on:
+  schedule:
+    - cron: 0 0 * * *
+
+jobs:
+  fetch-binaries:
+    strategy:
+      matrix:
+        os: [ubuntu-latest, macos-latest, windows-latest]
+    runs-on: ${{ matrix.os }}
+    steps:
+      - name: Install State Tool
+        uses: ActiveState/setup-state-tool@v1
+
+      - name: Copy State Tool binaries to workspace dir
+        shell: bash
+        run: |
+          exe=`which state`
+          dir=`dirname $exe`
+          cp -r $dir/* '${{ github.workspace }}'
+
+      - name: Upload binaries
+        uses: actions/upload-artifact@v4
+        with:
+          name: ${{ matrix.os }}-binaries
+          path: .
+
+  scan:
+    needs: fetch-binaries
+    runs-on: ubuntu-latest
+    steps:
+      - name: Download binaries
+        uses: actions/download-artifact@v4
+
+      - name: Scan binaries
+        uses: aquasecurity/[email protected]
+        with:
+          scan-type: rootfs
+          scan-ref: '.'
+          ignore-unfixed: true
+          format: table
+          exit-code: 1

activestate.generators.yaml

@@ -1,6 +1,7 @@
 scripts:
   - name: generate-api-client
     language: bash
+    standalone: true
     description: Generates the mono-api client files
     value: |
       echo "IMPORTANT!!! mono API and inventory API have to be in sync.  Consider running state run generate-inventory-client"
@@ -10,6 +11,7 @@ scripts:
       popd
   - name: generate-secrets-client
     language: bash
+    standalone: true
     description: Generates the secrets-api client files
     value: |
       WD=$(pwd)
@@ -18,6 +20,7 @@ scripts:
       popd
   - name: generate-headchef-client
     language: bash
+    standalone: true
     description: Generates the headchef-api client files
     value: |
       WD=$(pwd)
@@ -26,6 +29,7 @@ scripts:
       popd
   - name: generate-logstreamer-client
     language: bash
+    standalone: true
     description: Generates the buildlog-streamer client files
     value: |
       WD=$(pwd)
@@ -34,6 +38,7 @@ scripts:
       popd
   - name: generate-inventory-client
     language: bash
+    standalone: true
     description: Generates the inventory-api client files
     value: |
       echo "IMPORTANT!!! mono API and inventory API have to be in sync.  Consider running state run generate-api-client"
@@ -43,6 +48,7 @@ scripts:
       popd
   - name: generate-clients
     language: bash
+    standalone: true
     description: Generates all api clients
     value: |
       $scripts.generate-api-client.path()
@@ -55,6 +61,7 @@ scripts:
     value: python3 scripts/locale-generator.py
   - name: generate-payload
     language: bash
+    standalone: true
     description: Generate payload for installer / update archives
     value: |
       set -e
@@ -64,10 +71,10 @@ scripts:
       go run ./scripts/ci/payload-generator/main.go "$@"
   - name: generate-update
     language: bash
+    standalone: true
     description: Generate update files
     value: |
       set -e
-      export GOARCH=${1:-amd64}
       $constants.SET_ENV
 
       $scripts.generate-payload.path()
@@ -79,12 +86,15 @@ scripts:
       go run scripts/ci/update-generator/main.go -o ./build/update
   - name: generate-remote-install-deployment
     language: bash
+    standalone: true
     value: go run scripts/ci/deploy-generator/remote-installer/main.go "$@"
   - name: generate-graph
     language: bash
+    standalone: true
     description: Generates graph server and client files
     value: |
-      go install github.com/99designs/[email protected]
+      set -e
+      go install github.com/99designs/[email protected]
       cd ./cmd/state-svc && gqlgen --verbose
   - name: generate-test-update
     language: bash