dbschenker/vaultpal

Your friendly pal for using HashiCorp Vault

vaultpal's Issues

Too many assets in release

We should only build clients binaries for the typical modern (64 bit CPU) OSs.

• Linux
• MacOS
• Windows

(ARM and X86)

Merge manifests for multi-platform containers builds

Currently only the last platform "wins" (usually linux/arm64 since the job takes much longer).
Fix: Cache digest info during build, add explicit merge step at the end of the workflow

• https://docs.docker.com/build/ci/github-actions/multi-platform/
• docker/build-push-action#846

CodeQL Initialize Actions fail on Push Events

Dependabot Pipelines fail if triggered by Push events, since CodeQL Initialize Actions run into errors (see example). While we could probably extend the workflow permissions, the error messages simply suggest to use code scanning on pull_request events only. @pschulten WDYT?

Error: Workflows triggered by Dependabot on the "push" event run with read-only access. Uploading Code Scanning results requires write access. 

To use Code Scanning with Dependabot, please ensure you are using the "pull_request" event for this workflow and avoid triggering on the "push" event for Dependabot branches. 

See https://docs.github.com/en/code-security/secure-coding/configuring-code-scanning#scanning-on-push for more information on how to configure these events.