Revision 410730255597f4f5947eb6305eb4f90483410022 authored by Robin Gögge on 05 March 2024, 15:37:29 UTC, committed by Robin Gögge on 06 March 2024, 10:02:03 UTC
The legacy Kubernetes package repositories (apt.kubernetes.io and
yum.kubernetes.io, also known as packages.cloud.google.com) have been
removed as of 2024-03-04. This commit migrates these packages to the new
location, pkgs.k8s.io.

Signed-off-by: Robin Gögge <r.goegge@isovalent.com>
1 parent 1b4f77f
Raw File
.clomonitor.yml
# CLOMonitor metadata file

exemptions:
  - check: slack_presence
    reason: "The Cilium slack community can be found at http://slack.cilium.io/" # Justification of this exemption

  - check: dangerous_workflow
    reason: >
      "It is safe to run code checkout '${{ github.event.pull_request.head.sha }}' 
      and 'github.event.pull_request.head.ref' in .github/workflows/build-images-base.yaml 
      as this workflow is only permitted to be executed after an explicit approval of a 
      subset of committers."

  - check: signed_releases
    reason: >
      "All Cilium release images are cryptographically signed during build by cosign. 
      Images are hosted in Quay. OpenSSF Scorecard check is currently limited to repositories 
      hosted on GitHub, and does not support other source hosting repositories."

  - check: token_permissions
    reason: >
      "Reason to use every non-read-only token in GitHub workflows is commented in the respective workflow files."
back to top