aws-ebs-csi-driver.yaml

package:
  name: aws-ebs-csi-driver
  # When bumping the version check if the GHSA mitigations below can be removed.
  version: 1.18.0
  epoch: 0
  description: CSI driver for Amazon EBS.
  copyright:
    - license: Apache-2.0

environment:
  contents:
    packages:
      - wolfi-baselayout
      - busybox
      - build-base
      - go
      - ca-certificates-bundle

pipeline:
  # We can't use go/install because this requires specific ldflags to set the version
  - uses: git-checkout
    with:
      repository: https://github.com/kubernetes-sigs/aws-ebs-csi-driver
      tag: v${{package.version}}
      expected-commit: cfe3673b921dd2f50e023371d54fdb2dd219c7a0

  - runs: |
      # Mitigate GHSA-hw7c-3rfg-p46j
      go get google.golang.org/protobuf@v1.29.1
      go mod tidy

      # Our global LDFLAGS conflict with a Makefile parameter
      unset LDFLAGS
      make
      mkdir -p ${{targets.destdir}}/usr/bin
      cp bin/aws-ebs-csi-driver ${{targets.destdir}}/usr/bin/

update:
  enabled: true
  github:
    identifier: kubernetes-sigs/aws-ebs-csi-driver
    strip-prefix: v
    use-tag: true
    tag-filter: v