Skip to content

[release-1.11] [CVE-2023-44487] Disable http2 for webhooks #2162

[release-1.11] [CVE-2023-44487] Disable http2 for webhooks

[release-1.11] [CVE-2023-44487] Disable http2 for webhooks #2162

# Copyright 2020 The Knative Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
name: Downstream Knative
on:
pull_request:
branches: [ 'main', 'release-*' ]
jobs:
downstream-knative:
name: Unit Test
strategy:
fail-fast: false # Keep running if one leg fails.
matrix:
repo:
- knative/serving
- knative/networking
- knative/eventing
- knative/operator
- knative/client
- knative-sandbox/eventing-autoscaler-keda
- knative-sandbox/eventing-ceph
- knative-sandbox/eventing-github
- knative-sandbox/eventing-gitlab
- knative-sandbox/eventing-kafka
- knative-sandbox/eventing-kafka-broker
- knative-sandbox/eventing-rabbitmq
- knative-sandbox/eventing-redis
- knative-sandbox/kn-plugin-admin
- knative-sandbox/net-certmanager
- knative-sandbox/net-contour
- knative-sandbox/net-http01
- knative-sandbox/net-istio
- knative-sandbox/net-kourier
runs-on: ubuntu-latest
steps:
- name: Set up Go 1.20.x
uses: actions/setup-go@v3
with:
go-version: 1.20.x
- name: Install Dependencies
run: |
go install github.com/google/go-licenses@latest
- name: Checkout upstream at ${{ github.base_ref }}
uses: actions/checkout@v3
with:
fetch-depth: 0
path: upstream
- name: Merge upstream
if: github.event_name == 'pull_request'
shell: bash
working-directory: upstream
run: |
if ! git config user.name > /dev/null; then
git config user.name "Knative Action"
fi
if ! git config user.email > /dev/null; then
git config user.email "[email protected]"
fi
git remote add upstream https://github.com/${{ github.repository }}.git
git fetch upstream ${{ github.base_ref }}
git pull --no-rebase --no-commit upstream ${{ github.base_ref }}
- name: Checkout downstream at ${{ github.base_ref }}
uses: actions/checkout@v3
with:
ref: ${{ github.base_ref }}
repository: ${{ matrix.repo }}
path: downstream
- name: Test downstream
uses: knative/actions/go/downstream-test@main
with:
upstream-path: upstream
downstream-path: downstream