Script 'mail_helper' called by obssrc
Hello community,

here is the log from the commit of package digger-cli for openSUSE:Factory 
checked in at 2025-05-22 16:55:58
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/digger-cli (Old)
 and      /work/SRC/openSUSE:Factory/.digger-cli.new.2732 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "digger-cli"

Thu May 22 16:55:58 2025 rev:18 rq:1278920 version:0.6.101

Changes:
--------
--- /work/SRC/openSUSE:Factory/digger-cli/digger-cli.changes    2025-05-20 
12:20:38.291455230 +0200
+++ /work/SRC/openSUSE:Factory/.digger-cli.new.2732/digger-cli.changes  
2025-05-22 16:56:10.620155130 +0200
@@ -1,0 +2,8 @@
+Wed May 21 04:40:37 UTC 2025 - Johannes Kastl 
<opensuse_buildserv...@ojkastl.de>
+
+- Update to version 0.6.101:
+  * add page to mintjson fips (#1953)
+  * enable fips140 builds (#1952)
+  * chore/go 124 upgrade (#1951)
+
+-------------------------------------------------------------------

Old:
----
  digger-cli-0.6.100.obscpio

New:
----
  digger-cli-0.6.101.obscpio

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ digger-cli.spec ++++++
--- /var/tmp/diff_new_pack.a0WyZW/_old  2025-05-22 16:56:11.716201593 +0200
+++ /var/tmp/diff_new_pack.a0WyZW/_new  2025-05-22 16:56:11.720201762 +0200
@@ -19,7 +19,7 @@
 %define executable_name digger
 
 Name:           digger-cli
-Version:        0.6.100
+Version:        0.6.101
 Release:        0
 Summary:        CLI for the digger open source IaC orchestration tool
 License:        Apache-2.0

++++++ _service ++++++
--- /var/tmp/diff_new_pack.a0WyZW/_old  2025-05-22 16:56:11.752203119 +0200
+++ /var/tmp/diff_new_pack.a0WyZW/_new  2025-05-22 16:56:11.756203288 +0200
@@ -6,7 +6,7 @@
     <param name="exclude">go.mod</param>
     <param name="exclude">go.work</param>
     <param name="exclude">go.work.sum</param>
-    <param name="revision">v0.6.100</param>
+    <param name="revision">v0.6.101</param>
     <param name="match-tag">v*</param>
     <param name="versionformat">@PARENT_TAG@</param>
     <param name="versionrewrite-pattern">v(.*)</param>

++++++ _servicedata ++++++
--- /var/tmp/diff_new_pack.a0WyZW/_old  2025-05-22 16:56:11.776204136 +0200
+++ /var/tmp/diff_new_pack.a0WyZW/_new  2025-05-22 16:56:11.780204306 +0200
@@ -1,7 +1,7 @@
 <servicedata>
 <service name="tar_scm">
                 <param name="url">https://github.com/diggerhq/digger</param>
-              <param 
name="changesrevision">b7b2b43f6fc928e6a9aaf8c407b13117d7baa814</param></service><service
 name="tar_scm">
+              <param 
name="changesrevision">53d535e855158827dc559e5189803e47a0fada54</param></service><service
 name="tar_scm">
                 <param 
name="url">https://github.com/johanneskastl/digger</param>
               <param 
name="changesrevision">8fe377068e53e2050ff4c745388d8428d2b13bb0</param></service></servicedata>
 (No newline at EOF)

++++++ digger-cli-0.6.100.obscpio -> digger-cli-0.6.101.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/Dockerfile_backend 
new/digger-cli-0.6.101/Dockerfile_backend
--- old/digger-cli-0.6.100/Dockerfile_backend   2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/Dockerfile_backend   2025-05-20 21:19:45.000000000 
+0200
@@ -1,4 +1,4 @@
-FROM golang:1.22 as builder
+FROM golang:1.24.0 as builder
 ARG COMMIT_SHA
 RUN echo "commit sha: ${COMMIT_SHA}"
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/Dockerfile_backend_ee 
new/digger-cli-0.6.101/Dockerfile_backend_ee
--- old/digger-cli-0.6.100/Dockerfile_backend_ee        2025-05-19 
23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/Dockerfile_backend_ee        2025-05-20 
21:19:45.000000000 +0200
@@ -1,4 +1,4 @@
-FROM golang:1.22 as builder
+FROM golang:1.24.0 as builder
 ARG COMMIT_SHA
 RUN echo "commit sha: ${COMMIT_SHA}"
 
@@ -20,8 +20,16 @@
 
 # Multi-stage build will just copy the binary to an alpine image.
 FROM ubuntu:24.04 as runner
-ENV ATLAS_VERSION v0.31.0
+
 ARG COMMIT_SHA
+ARG GODEBUG_VALUE=off
+ARG GOFIPS140_VALUE=off
+
+# Set environment variables using the build arguments
+ENV GODEBUG=$GODEBUG_VALUE
+ENV GOFIPS140=$GOFIPS140_VALUE
+ENV ATLAS_VERSION v0.31.0
+
 WORKDIR /app
 
 RUN apt-get update && apt-get install -y ca-certificates curl && apt-get 
install -y git && apt-get clean all
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/Dockerfile_drift 
new/digger-cli-0.6.101/Dockerfile_drift
--- old/digger-cli-0.6.100/Dockerfile_drift     2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/Dockerfile_drift     2025-05-20 21:19:45.000000000 
+0200
@@ -1,4 +1,4 @@
-FROM golang:1.22 as builder
+FROM golang:1.24.0 as builder
 ARG COMMIT_SHA
 RUN echo "commit sha: ${COMMIT_SHA}"
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/Dockerfile_next 
new/digger-cli-0.6.101/Dockerfile_next
--- old/digger-cli-0.6.100/Dockerfile_next      2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/Dockerfile_next      2025-05-20 21:19:45.000000000 
+0200
@@ -1,5 +1,5 @@
 # Stage 1: Builder
-FROM golang:1.22.4 AS builder
+FROM golang:1.24.0 AS builder
 
 # Build arguments
 ARG COMMIT_SHA
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/action.yml 
new/digger-cli-0.6.101/action.yml
--- old/digger-cli-0.6.100/action.yml   2025-05-19 23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/action.yml   2025-05-20 21:19:45.000000000 +0200
@@ -8,6 +8,10 @@
     description: use ee cli?
     required: false
     default: 'false'
+  fips:
+    description: build with fips140 standard?
+    required: false
+    default: 'false'
   setup-aws:
     description: Setup AWS
     required: false
@@ -427,6 +431,10 @@
           else
             cd $GITHUB_ACTION_PATH/cli
           fi
+          if [[ ${{ inputs.fips }} == "true" ]]; then
+            export GODEBUG=fips140=only
+            export GOFIPS140=v1.0.0
+          fi        
           go build -o digger ./cmd/digger
           chmod +x digger
           PATH=$PATH:$(pwd)
@@ -467,7 +475,11 @@
       shell: bash
       run: |
         if [[ ${{ inputs.ee }} == "true" ]]; then
-          curl -sL 
https://github.com/diggerhq/digger/releases/download/${actionref}/digger-ee-cli-${{
 runner.os }}-${{ runner.arch }} -o digger
+          if [[ ${{ inputs.fips }} == "true" ]]; then
+            curl -sL 
https://github.com/diggerhq/digger/releases/download/${actionref}/digger-ee-cli-${{
 runner.os }}-${{ runner.arch }}-fips -o digger
+          else
+            curl -sL 
https://github.com/diggerhq/digger/releases/download/${actionref}/digger-ee-cli-${{
 runner.os }}-${{ runner.arch }} -o digger
+          fi
         else
           curl -sL 
https://github.com/diggerhq/digger/releases/download/${actionref}/digger-cli-${{
 runner.os }}-${{ runner.arch }} -o digger
         fi
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/backend/go.mod 
new/digger-cli-0.6.101/backend/go.mod
--- old/digger-cli-0.6.100/backend/go.mod       2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/backend/go.mod       2025-05-20 21:19:45.000000000 
+0200
@@ -1,6 +1,6 @@
 module github.com/diggerhq/digger/backend
 
-go 1.21.6
+go 1.24.0
 
 replace github.com/diggerhq/digger/libs => ../libs
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/cli/cmd/digger/default.go 
new/digger-cli-0.6.101/cli/cmd/digger/default.go
--- old/digger-cli-0.6.100/cli/cmd/digger/default.go    2025-05-19 
23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/cli/cmd/digger/default.go    2025-05-20 
21:19:45.000000000 +0200
@@ -19,6 +19,7 @@
 )
 
 func initLogger() {
+
        logLevel := os.Getenv("DIGGER_LOG_LEVEL")
        var level slog.Leveler
        if logLevel == "DEBUG" {
@@ -81,7 +82,7 @@
 
                defer func() {
                        if r := recover(); r != nil {
-                               slog.Error(fmt.Sprintf("stacktrace from panic: 
" + string(debug.Stack())))
+                               slog.Error("stacktrace from panic: " + 
string(debug.Stack()))
                                err := usage.SendLogRecord(logLeader, 
fmt.Sprintf("Panic occurred. %s", r))
                                if err != nil {
                                        slog.Error("Failed to send log record", 
"error", err)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/cli/go.mod 
new/digger-cli-0.6.101/cli/go.mod
--- old/digger-cli-0.6.100/cli/go.mod   2025-05-19 23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/cli/go.mod   2025-05-20 21:19:45.000000000 +0200
@@ -1,6 +1,6 @@
 module github.com/diggerhq/digger/cli
 
-go 1.21.6
+go 1.24.0
 
 replace github.com/diggerhq/digger/libs => ../libs
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/cli/pkg/digger/digger.go 
new/digger-cli-0.6.101/cli/pkg/digger/digger.go
--- old/digger-cli-0.6.100/cli/pkg/digger/digger.go     2025-05-19 
23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/cli/pkg/digger/digger.go     2025-05-20 
21:19:45.000000000 +0200
@@ -279,7 +279,7 @@
                err = prService.SetStatus(*job.PullRequestNumber, "pending", 
job.ProjectName+"/plan")
                if err != nil {
                        msg := fmt.Sprintf("Failed to set PR status. %v", err)
-                       return nil, msg, fmt.Errorf(msg)
+                       return nil, msg, fmt.Errorf("%s", msg)
                }
                planSummary, planPerformed, isNonEmptyPlan, plan, 
planJsonOutput, err := diggerExecutor.Plan()
 
@@ -289,10 +289,10 @@
                        err := prService.SetStatus(*job.PullRequestNumber, 
"failure", job.ProjectName+"/plan")
                        if err != nil {
                                msg := fmt.Sprintf("Failed to set PR status. 
%v", err)
-                               return nil, msg, fmt.Errorf(msg)
+                               return nil, msg, fmt.Errorf("%s", msg)
                        }
 
-                       return nil, msg, fmt.Errorf(msg)
+                       return nil, msg, fmt.Errorf("%s", msg)
                } else if planPerformed {
                        if isNonEmptyPlan {
                                reportTerraformPlanOutput(reporter, 
projectLock.LockId(), plan)
@@ -300,7 +300,7 @@
                                if err != nil {
                                        msg := fmt.Sprintf("Failed to validate 
plan. %v", err)
                                        slog.Error("Failed to validate plan.", 
"error", err)
-                                       return nil, msg, fmt.Errorf(msg)
+                                       return nil, msg, fmt.Errorf("%s", msg)
                                }
                                var planPolicyFormatter func(report string) 
string
                                summary := fmt.Sprintf("Terraform plan 
validation check (%v)", job.ProjectName)
@@ -329,7 +329,7 @@
                                        }
                                        msg := fmt.Sprintf("Plan is not 
allowed")
                                        slog.Error(msg)
-                                       return nil, msg, fmt.Errorf(msg)
+                                       return nil, msg, fmt.Errorf("%s", msg)
                                } else {
                                        _, _, err := reporter.Report("Terraform 
plan validation checks succeeded :white_check_mark:", planPolicyFormatter)
                                        if err != nil {
@@ -343,7 +343,7 @@
                        err := prService.SetStatus(*job.PullRequestNumber, 
"success", job.ProjectName+"/plan")
                        if err != nil {
                                msg := fmt.Sprintf("Failed to set PR status. 
%v", err)
-                               return nil, msg, fmt.Errorf(msg)
+                               return nil, msg, fmt.Errorf("%s", msg)
                        }
                        result := execution.DiggerExecutorResult{
                                OperationType:   
execution.DiggerOparationTypePlan,
@@ -364,27 +364,27 @@
                err = prService.SetStatus(*job.PullRequestNumber, "pending", 
job.ProjectName+"/apply")
                if err != nil {
                        msg := fmt.Sprintf("Failed to set PR status. %v", err)
-                       return nil, msg, fmt.Errorf(msg)
+                       return nil, msg, fmt.Errorf("%s", msg)
                }
 
                isMerged, err := prService.IsMerged(*job.PullRequestNumber)
                if err != nil {
                        msg := fmt.Sprintf("Failed to check if PR is merged. 
%v", err)
-                       return nil, msg, fmt.Errorf(msg)
+                       return nil, msg, fmt.Errorf("%s", msg)
                }
 
                // this might go into some sort of "appliability" plugin later
                isMergeable, err := 
prService.IsMergeable(*job.PullRequestNumber)
                if err != nil {
                        msg := fmt.Sprintf("Failed to check if PR is mergeable. 
%v", err)
-                       return nil, msg, fmt.Errorf(msg)
+                       return nil, msg, fmt.Errorf("%s", msg)
                }
                slog.Info("PR status Information", "mergeable", isMergeable, 
"merged", isMerged, "skipMergeCheck", job.SkipMergeCheck)
                if !isMergeable && !isMerged && !job.SkipMergeCheck {
                        comment := reportApplyMergeabilityError(reporter)
                        prService.SetStatus(*job.PullRequestNumber, "failure", 
job.ProjectName+"/apply")
 
-                       return nil, comment, fmt.Errorf(comment)
+                       return nil, comment, fmt.Errorf("%s", comment)
                } else {
 
                        // checking policies (plan, access)
@@ -395,14 +395,14 @@
                                if err != nil {
                                        msg := fmt.Sprintf("Failed to retrieve 
stored plan. %v", err)
                                        slog.Error("Failed to retrieve stored 
plan.", "error", err)
-                                       return nil, msg, fmt.Errorf(msg)
+                                       return nil, msg, fmt.Errorf("%s", msg)
                                }
 
                                _, violations, err := 
policyChecker.CheckPlanPolicy(SCMrepository, SCMOrganisation, job.ProjectName, 
job.ProjectDir, terraformPlanJsonStr)
                                if err != nil {
                                        msg := fmt.Sprintf("Failed to check 
plan policy. %v", err)
                                        slog.Error("Failed to check plan 
policy.", "error", err)
-                                       return nil, msg, fmt.Errorf(msg)
+                                       return nil, msg, fmt.Errorf("%s", msg)
                                }
                                planPolicyViolations = violations
                        } else {
@@ -414,7 +414,7 @@
                        if err != nil {
                                msg := fmt.Sprintf("Failed to run plan policy 
check before apply. %v", err)
                                slog.Error("Failed to run plan policy check 
before apply", "error", err)
-                               return nil, msg, fmt.Errorf(msg)
+                               return nil, msg, fmt.Errorf("%s", msg)
                        }
                        if !allowedToApply {
                                msg := reportPolicyError(job.ProjectName, 
command, requestedBy, reporter)
@@ -431,15 +431,15 @@
                                err := 
prService.SetStatus(*job.PullRequestNumber, "failure", job.ProjectName+"/apply")
                                if err != nil {
                                        msg := fmt.Sprintf("Failed to set PR 
status. %v", err)
-                                       return nil, msg, fmt.Errorf(msg)
+                                       return nil, msg, fmt.Errorf("%s", msg)
                                }
                                msg := fmt.Sprintf("Failed to run digger apply 
command. %v", err)
-                               return nil, msg, fmt.Errorf(msg)
+                               return nil, msg, fmt.Errorf("%s", msg)
                        } else if applyPerformed {
                                err := 
prService.SetStatus(*job.PullRequestNumber, "success", job.ProjectName+"/apply")
                                if err != nil {
                                        msg := fmt.Sprintf("Failed to set PR 
status. %v", err)
-                                       return nil, msg, fmt.Errorf(msg)
+                                       return nil, msg, fmt.Errorf("%s", msg)
                                }
                                appliesPerProject[job.ProjectName] = true
                        }
@@ -475,7 +475,7 @@
                err = diggerExecutor.Unlock()
                if err != nil {
                        msg := fmt.Sprintf("Failed to unlock project. %v", err)
-                       return nil, msg, fmt.Errorf(msg)
+                       return nil, msg, fmt.Errorf("%s", msg)
                }
 
                if planStorage != nil {
@@ -492,12 +492,12 @@
                err = diggerExecutor.Lock()
                if err != nil {
                        msg := fmt.Sprintf("Failed to lock project. %v", err)
-                       return nil, msg, fmt.Errorf(msg)
+                       return nil, msg, fmt.Errorf("%s", msg)
                }
 
        default:
                msg := fmt.Sprintf("Command '%s' is not supported", command)
-               return nil, msg, fmt.Errorf(msg)
+               return nil, msg, fmt.Errorf("%s", msg)
        }
        return &execution.DiggerExecutorResult{}, "", nil
 }
@@ -660,7 +660,7 @@
                                if err != nil {
                                        slog.Error("Error reporting Run.", 
"error", err)
                                }
-                               return fmt.Errorf(msg)
+                               return fmt.Errorf("%s", msg)
                        }
                        planIsAllowed, messages, err := 
policyChecker.CheckPlanPolicy(SCMrepository, SCMOrganisation, job.ProjectName, 
job.ProjectDir, planJsonOutput)
                        slog.Info(strings.Join(messages, "\n"))
@@ -671,7 +671,7 @@
                                if err != nil {
                                        slog.Error("Error reporting Run.", 
"error", err)
                                }
-                               return fmt.Errorf(msg)
+                               return fmt.Errorf("%s", msg)
                        }
                        if !planIsAllowed {
                                msg := fmt.Sprintf("Plan is not allowed")
@@ -680,7 +680,7 @@
                                if err != nil {
                                        slog.Error("Error reporting Run.", 
"error", err)
                                }
-                               return fmt.Errorf(msg)
+                               return fmt.Errorf("%s", msg)
                        } else {
                                err = backendApi.ReportProjectRun(repo, 
job.ProjectName, runStartedAt, time.Now(), "SUCCESS", command, plan)
                                if err != nil {
@@ -701,7 +701,7 @@
                                if err != nil {
                                        slog.Error("Error reporting Run.", 
"error", err)
                                }
-                               return fmt.Errorf(msg)
+                               return fmt.Errorf("%s", msg)
                        }
                        err = backendApi.ReportProjectRun(repo, 
job.ProjectName, runStartedAt, time.Now(), "SUCCESS", command, output)
                        if err != nil {
@@ -742,7 +742,7 @@
        if err != nil {
                msg := fmt.Sprintf("failed to check drift policy. %v", err)
                slog.Error(msg)
-               return msg, fmt.Errorf(msg)
+               return msg, fmt.Errorf("%s", msg)
        }
 
        if !policyEnabled {
@@ -754,7 +754,7 @@
        if err != nil {
                msg := fmt.Sprintf("failed to Run digger plan command. %v", err)
                slog.Error(msg)
-               return msg, fmt.Errorf(msg)
+               return msg, fmt.Errorf("%s", msg)
        }
 
        if planPerformed && nonEmptyPlan {
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/cli/pkg/drift/slack.go 
new/digger-cli-0.6.101/cli/pkg/drift/slack.go
--- old/digger-cli-0.6.100/cli/pkg/drift/slack.go       2025-05-19 
23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/cli/pkg/drift/slack.go       2025-05-20 
21:19:45.000000000 +0200
@@ -78,7 +78,7 @@
                        }
                        slog.Error("failed to send slack drift request", 
"status code", resp.Status, "body", body)
                        msg := fmt.Sprintf("failed to send slack drift request. 
%v. Message: %v", resp.Status, body)
-                       return fmt.Errorf(msg)
+                       return fmt.Errorf("%s", msg)
                }
                resp.Body.Close()
        }
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/cli_e2e/go.mod 
new/digger-cli-0.6.101/cli_e2e/go.mod
--- old/digger-cli-0.6.100/cli_e2e/go.mod       2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/cli_e2e/go.mod       2025-05-20 21:19:45.000000000 
+0200
@@ -1,6 +1,6 @@
 module github.com/diggerhq/digger/cli_e2e
 
-go 1.22.0
+go 1.24.0
 
 require github.com/stretchr/testify v1.9.0
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/dgctl/go.mod 
new/digger-cli-0.6.101/dgctl/go.mod
--- old/digger-cli-0.6.100/dgctl/go.mod 2025-05-19 23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/dgctl/go.mod 2025-05-20 21:19:45.000000000 +0200
@@ -1,6 +1,6 @@
 module github.com/diggerhq/digger/dgctl
 
-go 1.22.4
+go 1.24.0
 
 
 require (
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/docs/ee/fips-140.mdx 
new/digger-cli-0.6.101/docs/ee/fips-140.mdx
--- old/digger-cli-0.6.100/docs/ee/fips-140.mdx 1970-01-01 01:00:00.000000000 
+0100
+++ new/digger-cli-0.6.101/docs/ee/fips-140.mdx 2025-05-20 21:19:45.000000000 
+0200
@@ -0,0 +1,19 @@
+---
+title: "FIPS 140 standard"
+---
+
+You can use digger binary with FIPS140 standard. FIPS 140 (Federal Information 
Processing Standard Publication 140) is a U.S. government standard that 
specifies security requirements for cryptographic modules protecting sensitive 
information.
+
+as of version v0.6.101 digger backend and cli are both compiled seperately 
with FIPS140 enabled. In order to enable it for github follow these steps:
+
+- For the backend you need to ensure you use the right docker image: 
`_backend_ee_fips` during the pull
+- For the cli you need to add the following argument in addition to `ee: true` 
:
+
+```
+    - diggerhq/digger@vLatest
+      with:
+         ee: 'true'
+         fips: 'true'
+```
+
+If you are using gitlab or other VCS then just ensure that you are downloading 
the fips enabled binary which is suffixed with '_fips'
\ No newline at end of file
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/docs/mint.json 
new/digger-cli-0.6.101/docs/mint.json
--- old/digger-cli-0.6.100/docs/mint.json       2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/docs/mint.json       2025-05-20 21:19:45.000000000 
+0200
@@ -57,7 +57,8 @@
         "ee/opa",
         "ee/multi-github",
         "ee/gitlab",
-        "ee/buildkite"
+        "ee/buildkite",
+        "ee/fips-140"
       ]
     },
     {
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/ee/backend/go.mod 
new/digger-cli-0.6.101/ee/backend/go.mod
--- old/digger-cli-0.6.100/ee/backend/go.mod    2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/ee/backend/go.mod    2025-05-20 21:19:45.000000000 
+0200
@@ -4,7 +4,7 @@
 
 replace github.com/diggerhq/digger/backend => ../../backend
 
-go 1.22.4
+go 1.24.0
 
 require (
        github.com/bradleyfalzon/ghinstallation/v2 v2.11.0
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/ee/backend/main.go 
new/digger-cli-0.6.101/ee/backend/main.go
--- old/digger-cli-0.6.100/ee/backend/main.go   2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/ee/backend/main.go   2025-05-20 21:19:45.000000000 
+0200
@@ -1,6 +1,7 @@
 package main
 
 import (
+       "crypto/fips140"
        "embed"
        "fmt"
        "github.com/diggerhq/digger/backend/bootstrap"
@@ -31,6 +32,8 @@
                log.Printf("error checking license %v", err)
                os.Exit(1)
        }
+
+       log.Printf("fips140 enabled: %v", fips140.Enabled())
        githubProvider := github.DiggerGithubEEClientProvider{}
        diggerController := ce_controllers.DiggerController{
                CiBackendProvider:                  
ci_backends2.EEBackendProvider{},
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/ee/cli/cmd/digger/default.go 
new/digger-cli-0.6.101/ee/cli/cmd/digger/default.go
--- old/digger-cli-0.6.100/ee/cli/cmd/digger/default.go 2025-05-19 
23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/ee/cli/cmd/digger/default.go 2025-05-20 
21:19:45.000000000 +0200
@@ -1,6 +1,7 @@
 package main
 
 import (
+       "crypto/fips140"
        "encoding/json"
        "fmt"
        "github.com/diggerhq/digger/cli/pkg/digger"
@@ -24,8 +25,8 @@
 var defaultCmd = &cobra.Command{
        Use: "default",
        Run: func(cmd *cobra.Command, args []string) {
-
                specStr := os.Getenv("DIGGER_RUN_SPEC")
+               log.Printf("Fips140 enabled in build: %v", fips140.Enabled())
                if specStr != "" {
                        var spec lib_spec.Spec
                        err := json.Unmarshal([]byte(specStr), &spec)
@@ -78,7 +79,7 @@
 
                defer func() {
                        if r := recover(); r != nil {
-                               log.Println(fmt.Sprintf("stacktrace from panic: 
\n" + string(debug.Stack())))
+                               log.Println("stacktrace from panic: \n" + 
string(debug.Stack()))
                                err := usage.SendLogRecord(logLeader, 
fmt.Sprintf("Panic occurred. %s", r))
                                if err != nil {
                                        log.Printf("Failed to send log record. 
%s\n", err)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/ee/cli/go.mod 
new/digger-cli-0.6.101/ee/cli/go.mod
--- old/digger-cli-0.6.100/ee/cli/go.mod        2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/ee/cli/go.mod        2025-05-20 21:19:45.000000000 
+0200
@@ -1,6 +1,6 @@
 module github.com/diggerhq/digger/ee/cli
 
-go 1.22.4
+go 1.24.0
 
 replace github.com/diggerhq/digger/libs => ../../libs
 
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/ee/drift/dbgen/go.mod 
new/digger-cli-0.6.101/ee/drift/dbgen/go.mod
--- old/digger-cli-0.6.100/ee/drift/dbgen/go.mod        2025-05-19 
23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/ee/drift/dbgen/go.mod        2025-05-20 
21:19:45.000000000 +0200
@@ -1,6 +1,6 @@
 module dbgen
 
-go 1.22.0
+go 1.24.0
 
 require (
        gorm.io/driver/postgres v1.5.9
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/ee/drift/go.mod 
new/digger-cli-0.6.101/ee/drift/go.mod
--- old/digger-cli-0.6.100/ee/drift/go.mod      2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/ee/drift/go.mod      2025-05-20 21:19:45.000000000 
+0200
@@ -4,7 +4,7 @@
 
 replace github.com/diggerhq/digger/libs => ../../libs
 
-go 1.22.4
+go 1.24.0
 
 require (
        github.com/bradleyfalzon/ghinstallation/v2 v2.11.0
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/libs/execution/execution.go 
new/digger-cli-0.6.101/libs/execution/execution.go
--- old/digger-cli-0.6.100/libs/execution/execution.go  2025-05-19 
23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/libs/execution/execution.go  2025-05-20 
21:19:45.000000000 +0200
@@ -50,7 +50,7 @@
        locked, err := l.ProjectLock.Lock()
        if err != nil {
                msg := fmt.Sprintf("digger apply, error locking project: %v", 
err)
-               return nil, false, msg, fmt.Errorf(msg)
+               return nil, false, msg, fmt.Errorf("%s", msg)
        }
        slog.Info("Lock result", "locked", locked)
        if locked {
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/libs/go.mod 
new/digger-cli-0.6.101/libs/go.mod
--- old/digger-cli-0.6.100/libs/go.mod  2025-05-19 23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/libs/go.mod  2025-05-20 21:19:45.000000000 +0200
@@ -1,6 +1,6 @@
 module github.com/diggerhq/digger/libs
 
-go 1.21.6
+go 1.24.0
 
 require (
        cloud.google.com/go/storage v1.46.0
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/libs/locking/locking.go 
new/digger-cli-0.6.101/libs/locking/locking.go
--- old/digger-cli-0.6.100/libs/locking/locking.go      2025-05-19 
23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/libs/locking/locking.go      2025-05-20 
21:19:45.000000000 +0200
@@ -75,7 +75,7 @@
                        comment := "Project " + projectLock.projectId() + " 
locked by another PR #" + transactionIdStr + " (failed to acquire lock " + 
projectLock.ProjectNamespace + "). The locking plan must be applied or 
discarded before future plans can execute"
 
                        reportLockingFailed(projectLock.Reporter, comment)
-                       return false, fmt.Errorf(comment)
+                       return false, fmt.Errorf("%s", comment)
                }
        }
 
@@ -152,7 +152,7 @@
                        transactionIdStr := strconv.Itoa(*transactionId)
                        comment := "Project " + projectLock.projectId() + " 
locked by another PR #" + transactionIdStr + "(failed to acquire lock " + 
projectLock.ProjectName + "). The locking plan must be applied or discarded 
before future plans can execute"
                        reportLockingFailed(projectLock.Reporter, comment)
-                       return false, fmt.Errorf(comment)
+                       return false, fmt.Errorf("%s", comment)
                }
                return true, nil
        }
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/next/dbgen/go.mod 
new/digger-cli-0.6.101/next/dbgen/go.mod
--- old/digger-cli-0.6.100/next/dbgen/go.mod    2025-05-19 23:43:17.000000000 
+0200
+++ new/digger-cli-0.6.101/next/dbgen/go.mod    2025-05-20 21:19:45.000000000 
+0200
@@ -1,6 +1,6 @@
 module dbgen
 
-go 1.22.4
+go 1.24.0
 
 require (
        github.com/Joker/jade v1.1.3
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' 
'--exclude=.svnignore' old/digger-cli-0.6.100/next/go.mod 
new/digger-cli-0.6.101/next/go.mod
--- old/digger-cli-0.6.100/next/go.mod  2025-05-19 23:43:17.000000000 +0200
+++ new/digger-cli-0.6.101/next/go.mod  2025-05-20 21:19:45.000000000 +0200
@@ -1,6 +1,6 @@
 module github.com/diggerhq/digger/next
 
-go 1.22.4
+go 1.24.0
 
 replace github.com/diggerhq/digger/backend => ../backend
 

++++++ digger-cli.obsinfo ++++++
--- /var/tmp/diff_new_pack.a0WyZW/_old  2025-05-22 16:56:12.620239916 +0200
+++ /var/tmp/diff_new_pack.a0WyZW/_new  2025-05-22 16:56:12.624240085 +0200
@@ -1,5 +1,5 @@
 name: digger-cli
-version: 0.6.100
-mtime: 1747690997
-commit: b7b2b43f6fc928e6a9aaf8c407b13117d7baa814
+version: 0.6.101
+mtime: 1747768785
+commit: 53d535e855158827dc559e5189803e47a0fada54
 

++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/digger-cli/vendor.tar.gz 
/work/SRC/openSUSE:Factory/.digger-cli.new.2732/vendor.tar.gz differ: char 13, 
line 1

Reply via email to