Disable version consistency for ECS task definition

What's Changed

• import OIDC resources exported from mac-fc-infra repo by @leslie-corbalt in #192
• Bump actions/setup-python from 4.7.0 to 5.0.0 by @dependabot in #190
• add default tags to github-actions-runner IAM and ECR resources by @leslie-corbalt in #193
• move local state to remote s3 backend by @leslie-corbalt in #194
• update/remove docs: READMEs, Usage, and confluence pages by @leslie-corbalt in #195
• update docs 2 by @leslie-corbalt in #196
• revert ubuntu to 23.10 by @leslie-corbalt in #198
• enable scan on push by @leslie-corbalt in #197
• Update Actions Runner Version to 2.313.0 by @cmcs-github-svc-user in #204
• Update Actions Runner Version to 2.314.1 by @cmcs-github-svc-user in #206
• Update Actions Runner Version to 2.315.0 by @cmcs-github-svc-user in #207
• Update Actions Runner Version to 2.316.0 by @cmcs-github-svc-user in #208
• Update Actions Runner Version to 2.316.1 by @cmcs-github-svc-user in #209
• Update Actions Runner Version to 2.317.0 by @cmcs-github-svc-user in #210
• Fix broken CI by @ben-harvey in #213
• Update trivyignore by @ben-harvey in #216
• Bump alpine from 3.19.0 to 3.20.2 by @dependabot in #218
• Bump slackapi/slack-github-action from 1.24.0 to 1.27.0 by @dependabot in #219
• Bump actions/cache from 3 to 4 by @dependabot in #199
• Bump ubuntu from 23.10 to 24.04 by @dependabot in #200
• Update Actions Runner Version to 2.319.1 by @cmcs-github-svc-user in #215
• Bump actions/setup-python from 5.0.0 to 5.2.0 by @dependabot in #220
• Bump peter-evans/create-pull-request from 5 to 6 by @dependabot in #221
• Update Actions Runner Version to 2.320.0 by @cmcs-github-svc-user in #225
• Fix Trivy rate limit error by pulling vulnerability DB from ECR by @ben-harvey in #227
• Update Actions Runner Version to 2.321.0 by @cmcs-github-svc-user in #226
• Bump ubuntu base image to 25.04 for latest image; update trivyignores by @ben-harvey in #229
• Bump alpine from 3.20.2 to 3.21.0 by @dependabot in #228
• Bump docker/build-push-action from 5 to 6 by @dependabot in #223
• Bump pre-commit/action from 3.0.0 to 3.0.1 by @dependabot in #222
• Address Dockle finding by @ben-harvey in #232
• Install awscli in runner by @hundt-corbalt in #235
• Update Actions Runner Version to 2.322.0 by @cmcs-github-svc-user in #236
• Bump alpine from 3.21.0 to 3.21.3 by @dependabot in #237
• Bump slackapi/slack-github-action from 1.27.0 to 2.0.0 by @dependabot in #230
• Bump peter-evans/create-pull-request from 6 to 7 by @dependabot in #231
• Update Actions Runner Version to 2.323.0 by @cmcs-github-svc-user in #238
• Remove example security workflow and related local action by @ben-harvey in #239
• Remove OIDC IAM role secret by @ben-harvey in #240
• Update Actions Runner Version to 2.325.0 by @cmcs-github-svc-user in #244
• Scan and fix MEDIUM Trivy vulnerabilities for latest image by @ben-harvey in #245
• Add version consistency to container definition by @ben-harvey in #246

Full Changelog: v5.0.0...v6.0.0

Import ECR resources in MACBIS Shared DSO Dev to this repo

This release imports ECR resources created in a now-archived repo into this repo.

v4.3.0

What's Changed

• Add awscli to image by @crbudzeak in #57
• Update Actions Runner Version to 2.284.0 by @robot-mac-fc in #58
• Support Cypress tests by @crbudzeak in #59
• Update Actions Runner Version to 2.285.0 by @robot-mac-fc in #60
• Update Actions Runner Version to 2.285.1 by @robot-mac-fc in #61
• add .trivyignore by @crbudzeak in #62
• Update Actions Runner Version to 2.286.0 by @robot-mac-fc in #63
• Add variables for task and container CPU and memory by @crbudzeak in #65
• Update Actions Runner Version to 2.286.1 by @robot-mac-fc in #66
• Add ecr_repository_arns variable by @crbudzeak in #67
• Update Actions Runner Version to 2.287.0 by @robot-mac-fc in #68
• Update Actions Runner Version to 2.287.1 by @robot-mac-fc in #69
• Update .trivyignore by @crbudzeak in #80
• Update Actions Runner Version to 2.288.0 by @robot-mac-fc in #70
• Bump actions/checkout from 2 to 3 by @dependabot in #72
• Update Actions Runner Version to 2.288.1 by @robot-mac-fc in #73
• Update Actions Runner Version to 2.290.0 by @robot-mac-fc in #79
• Bump actions/setup-python from 2 to 3.1.1 by @dependabot in #78
• Bump peter-evans/create-pull-request from 3 to 4 by @dependabot in #81
• Update Actions Runner Version to 2.290.1 by @robot-mac-fc in #83
• Bump convictional/trigger-workflow-and-wait from 1.5.0 to 1.6.1 by @dependabot in #84
• Update Actions Runner Version to 2.292.0 by @robot-mac-fc in #89
• Bump convictional/trigger-workflow-and-wait from 1.6.1 to 1.6.3 by @dependabot in #88
• Update runner version, dependencies and .trivyignore by @ben-harvey in #99
• Refactor build workflow by @ben-harvey in #102
• Use personal token and add error handling by @ben-harvey in #103
• Bump actions/setup-python from 4.1.0 to 4.2.0 by @dependabot in #100
• Fix 'update actions runner' workflow by @ben-harvey in #105
• Update Actions Runner Version to 2.297.0 by @robot-mac-fc in #104

New Contributors

• @crbudzeak made their first contribution in #57
• @ben-harvey made their first contribution in #99

Full Changelog: v4.2.0...v4.3.0

v4.2.0

What's Changed

• readme update for IAM role by @chtakahashi in #52
• Update Actions Runner Version to 2.283.2 by @robot-mac-fc in #53
• clarify AWS Secrets naming requirement by @lxuo-trussworks in #54
• Update Actions Runner Version to 2.283.3 by @robot-mac-fc in #55
• Include additional ECR permissions by @chtakahashi in #56

Full Changelog: v4.1.0...v4.2.0

v4.1.0

Adds ability to specify:

• assign_public_ip
• role_path
• permissions_boundary

github-actions-runner-aws: Release v4.0.0

Merge pull request #48 from CMSgov/container-name-update

update container name

github-actions-runner-aws: Release v3.0.0

• Updated required/optional parameters, put lifecycle policies in place, and added cloudwatch logging

github-actions-runner-aws: Release v2.0.0

• Remove ECR from the terraform module
• Bump pre-commit/action from 2.0.0 to 2.0.3
• Configure dependabot to update github actions versions
• Switch to ECR with CMS Org read access
• Integrate dockle into our workflow
• Bump ubuntu from 18.04 to 20.04

github-actions-runner-aws: Release v1.1.0

• Move dependabot config outside of the workflows
• Terraform fmt pre-commit hook
• Ignore task_definition changes
• Update Actions Runner Version to 2.280.2
• Testing with kind/k8s
• Add architecture diagram and example module usage

First Release

Terraform module to provision an ECR repository to house docker images for a self-hosted github runner and an associated ECS Service using Fargate