CHANGELOG.md

Changelog

2.0.0 (2026-04-10)

⚠ BREAKING CHANGES

• Caller workflows that set explicit permissions must add artifact-metadata: write to their permissions block. Without it, GitHub will reject the workflow with a validation error.

Features

• require artifact-metadata:write permission for attestations (#144) (e7be9b5)

1.12.2 (2026-04-10)

Bug Fixes

• remove artifact-metadata:write from reusable workflows (#142) (88588eb)

1.12.1 (2026-04-10)

Bug Fixes

• add artifact-metadata:write permission and bump composite action (44df134)
• deps: bump the all-github-actions group across 1 directory with 5 updates (#139) (875c617)
• resolve Docker build workflow warnings (#141) (44df134)

1.12.0 (2026-03-27)

Features

• add Infisical secrets composite action and example workflows (#134) (2f0ac6f)
• implement get_infisical_secrets composite action with examples and documentation (2f0ac6f)

Bug Fixes

• address all code scanning alerts (#136) (def5c61)
• harden all reusable workflows against code scanning alerts (3e49533)
• harden all reusable workflows against code scanning alerts (def5c61)

1.11.6 (2026-03-24)

Bug Fixes

• bump trivy version to the latest and update the comment (#131) (497acc5)

1.11.5 (2026-03-24)

Bug Fixes

• deps: bump aquasecurity/trivy-action (b33ea8f)
• deps: bump aquasecurity/trivy-action from e368e328979b113139d6f9068e03accaed98a518 to 57a97c7e7821a5776cebc9bb87c984fa69cba8f1 (#128) (b33ea8f)
• deps: bump azure/setup-helm from 4.3.1 to 5.0.0 (#127) (46b6c1f)
• deps: bump docker/login-action from 3.7.0 to 4.0.0 (#123) (8fdf229)
• deps: bump marocchino/sticky-pull-request-comment from 2 to 3 (#125) (5b0e3f6)
• update composite action to remediate Trivy supply chain attack (#126) (619371e)

1.11.4 (2026-03-02)

Bug Fixes

• dependabot: include scope in commit messages (6037327)
• trivy: specify version for Trivy vulnerability scanner (6261c98)
• workflows: update github-action-image-build-and-push version for Docker builds (096391d)

1.11.3 (2026-03-02)

Bug Fixes

• dependabot: use fix prefix for commit messages (#118) (5884540)

1.11.2 (2025-11-25)

Bug Fixes

• update jfrog setup cli steps to use oidc auth instead of artifactory token (3b1f8d7)

1.11.1 (2025-11-12)

Bug Fixes

• update Docker Hub credentials in workflows (f6a84c2)

1.11.0 (2025-11-05)

Features

• add git repository configuration to Docker workflows (27ca4ed)

Bug Fixes

• update token retrieval in Docker workflows (560135a)

1.10.1 (2025-10-15)

Bug Fixes

• add configuration to specify how to checkout the submodules (d63c500)

1.10.0 (2025-10-14)

Features

• print trivy output as part of the build job (b5f167a)

1.9.2 (2025-10-06)

Bug Fixes

• bump docker/login-action from 3.5.0 to 3.6.0 (#93) (4496e14)

1.9.1 (2025-10-03)

Bug Fixes

• remove tag name from image name (afe37d8)
• Send fully qualified name for each digest (c6b1bb8)

1.9.0 (2025-09-11)

Features

• add skip_attest input to docker promotion workflow (2b76c67)

Bug Fixes

• change skip_attest input type to string in docker promotion workflow (d65d060)

1.8.0 (2025-09-11)

Features

• add run_trivy input for Docker workflows (886662a)
• enhance docker promotion workflow with source_tag input (f26eeac)

Bug Fixes

• update valid environments in docker promotion workflow (6f29a37)

1.7.0 (2025-09-10)

Features

• add fetch-depth input for Docker workflows (e10d7ee)

1.6.0 (2025-09-10)

Features

• add source_tag input for Docker promotion workflow (56464b4)

1.5.1 (2025-08-15)

Bug Fixes

• be able to select runner for dockerhub as well (62b3174)

1.5.0 (2025-08-14)

Features

• Add pre-build script support to Docker workflows (b06cb5b)

1.4.3 (2025-08-12)

Bug Fixes

• Enable recursive submodule checkout (c8c2b07)
• Update pull request trigger configuration in build-push-dockerhub-simple.yml (dba621a)

1.4.2 (2025-07-30)

Bug Fixes

• Update version to create more tags by default (4b9db1e)

1.4.1 (2025-07-29)

Bug Fixes

• update versions and remove jfrog url from image name (cb6ab7b)

1.4.0 (2025-07-28)

Features

• add customizable runner input (29d290e)

Bug Fixes

• Update versions (3c8f5b9)

1.3.4 (2025-06-26)

Bug Fixes

• typo in attestation code (f53acdf)

1.3.3 (2025-06-26)

Bug Fixes

• set correct attestation subject name (cffecb3)

1.3.2 (2025-06-10)

Bug Fixes

• Correct JFrog URL format in docker-promote-jfrog.yaml (2dd5524)

1.2.1 (2025-06-04)

Bug Fixes

• Correct typo in error message for repo name determination in docker-build-push-jfrog.yaml (afe4686)

1.2.0 (2025-06-04)

Features

• Add Docker build and push workflows for Docker Hub and JFrog Artifactory (#59) (f68fb7d)
• added acctions: docker-build-and-push-image and jfrog-build-pub… (8d0255b)
• added acctions: docker-build-and-push-image and jfrog-build-publish (1737e3e)
• added pipeline workflows (cae1f0a)
• added pipeline workflows (56e7c72)
• switched docker login credentials to oidc token (9d435d5)
• updated pipeline-ci-pull-request (621b1be)

1.1.1 (2025-04-15)

Bug Fixes

• add missing issues permission for release please (912186b)
• add missing issues permission for release please (29a013e)

1.1.0 (2025-04-14)

Features

• docker build improvements (459b8fa)

1.0.0 (2025-04-14)

Features

• add docker build and push workflow (v2) (#36) (15c8035)
• added authentication for module validation (876eae9)
• added dependabot for GitHub Actions (41fc3d1)
• added output prs_created (9592746)
• added publish-terraform-module workflow (4c3e6e5)
• Added rlease workflow with 'release-please' (835ad6f)
• added workflow job for terraform module release (12bf0fc)
• commitizen: added bump workflow (ee4d1f5)
• create and push tag (f949088)
• docker build/promote image workflows (#4) (a7e3ad1)
• enhance Docker promotion and publishing workflows (#35) (016adb1)
• helm chart packaging and publish it to jfrog resuable workflow (#20) (266072a)
• improved pre-commit workflows (67939d4)
• pre-commit: added download of terraform-docs (873f9de)
• pre-commit: added pre-commit configuration (c6b9dcc)
• release-please: added 2 workflows for releasing versions (bc93c11)
• release: added output release_created (f530ffc)
• tflint: added tflint installation (7f55375)
• use release please action for semantic versioning (c2954e7)
• use release please instead (f8f872f)

Bug Fixes

• add missing permissions (14c1f5c)
• add missing permissions (e008b6e)
• added missing files (00fd13a)
• compute-name: fixet terraform module and provider names (3962bd0)
• compute-terraform-module-name: updated logic (814f727)
• exclude example dir when publishing modules (#34) (5e04a0b)
• Fixed inputs (fdafd83)
• jfrog: addded missing protocol scheme (c03f176)
• job-terraform-release: added global permissions block (8f4f276)
• job-terraform-release: fixed input name (237c5d1)
• job-terraform-release: removed permissions block (5bb2a20)
• job-terraform-release: removed versions from local workflow refs (9148808)
• labels permissions (8d7036c)
• labels permissions (e735b7a)
• name (b57d454)
• publish-tf-module: updated provider name (9b9ff4f)
• release: removed not needed inputs (72971a3)
• resolved problem with repository name contaning multiple dashes (68873e7)
• terraform-docs: create folder if not present (40940be)
• terraform-docs: fixed download process of binary (0eecf0d)
• terraform-docs: fixed installation script (01e6587)
• updated JFROG_URL with connection type (6f34087)
• updated secret setup (2a4ad8a)