-
Notifications
You must be signed in to change notification settings - Fork 588
New issue
Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? # to your account
Resolve security warning for macOS users #249
Conversation
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
Makefile
Outdated
@@ -241,8 +244,7 @@ changelog-release: | |||
|
|||
.PHONY: changelog-unreleased | |||
changelog-unreleased: ## show the current changelog that will be produced on the next release (note: requires GITHUB_TOKEN set) | |||
@docker run -it --rm \ | |||
-v "$(shell pwd)":/usr/local/src/your-app ferrarimarco/github-changelog-generator \ | |||
@github_changelog_generator \ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
the changelog-unreleased
is a target meant for local developers to be able to (optionally) use to see what the changelog would be before cutting a release. By leveraging the docker image dev's don't need to install the right version of ruby, install the gem, and get pathing correct. With the new change that would be required.
(The changelog-release
target is OK, since this env is setup with ci-bootstrap-mac
)
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Sounds good, reverting this.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Very nice addition 🚀
Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
* Add support for macOS signing and notarization Signed-off-by: Dan Luhring <dan.luhring@anchore.com> * Use Docker to run the changelog generator locally Signed-off-by: Dan Luhring <dan.luhring@anchore.com>
.tar.gz
asset with a.dmg
assetThis implements https://github.com/anchore/project-toolbox/issues/27 for syft. Other released executables will need similar changes.