Misc openssf enablement

R.yaml

@@ -2,7 +2,7 @@
 package:
  name: R
  version: 4.3.1
- epoch: 5
+ epoch: 6
  description: Language and environment for statistical computing
  copyright:
  - license: ( GPL-2.0-only OR GPL-3.0-only ) AND LGPL-2.1-or-later
@@ -67,6 +67,7 @@ environment:
  - openblas-dev
  - openjdk-17
  - openjdk-17-default-jvm
+ - openssf-compiler-options
  - pango-dev
  - pcre2-dev
  - perl

aom.yaml

@@ -5,7 +5,7 @@
 package:
  name: aom
  version: 3.10.0
- epoch: 0
+ epoch: 1
  description: Alliance for Open Media (AOM) AV1 codec SDK
  copyright:
  - license: BSD-2-Clause
@@ -21,6 +21,7 @@ environment:
  - cmake
  # gcc-14 hits ICE on arm64
  - gcc~13
+ - openssf-compiler-options
  - perl
  - python3
  - samurai

bazel-5.yaml

@@ -1,7 +1,7 @@
 package:
  name: bazel-5
  version: 5.4.1
- epoch: 2
+ epoch: 3
  description: Bazel is an open-source build and test tool
  resources:
  cpu: 16
@@ -23,6 +23,7 @@ environment:
  - libstdc++-6
  - libstdc++-6-dev
  - openjdk-11
+ - openssf-compiler-options
  - python3
  - zip
 

bazel-6.yaml

@@ -1,7 +1,7 @@
 package:
  name: bazel-6
  version: 6.5.0
- epoch: 1
+ epoch: 2
  description: Bazel is an open-source build and test tool
  resources:
  cpu: 16
@@ -23,6 +23,7 @@ environment:
  - libstdc++-6
  - libstdc++-6-dev
  - openjdk-11
+ - openssf-compiler-options
  - python3
  - zip
 

binaryen.yaml

@@ -1,7 +1,7 @@
 package:
  name: binaryen
  version: "119"
- epoch: 0
+ epoch: 1
  description: Optimizer and compiler/toolchain library for WebAssembly
  copyright:
  - license: Apache-2.0
@@ -18,6 +18,7 @@ environment:
  - busybox
  - ca-certificates-bundle
  - cmake
+ - openssf-compiler-options
  - samurai
 
 pipeline:

boost.yaml

@@ -15,6 +15,7 @@ environment:
  - build-base
  - busybox
  - ca-certificates-bundle
+ - openssf-compiler-options
  - patch
  - python3
  - python3-dev

brew.yaml

@@ -1,7 +1,7 @@
 package:
  name: brew
  version: 4.4.0
- epoch: 0
+ epoch: 1
  description: "The homebrew package manager"
  copyright:
  - license: BSD-2-Clause
@@ -40,6 +40,7 @@ environment:
  contents:
  packages:
  - git
+ - openssf-compiler-options
  - wolfi-base
 
 pipeline:

ca-certificates.yaml

@@ -2,7 +2,7 @@ package:
  name: ca-certificates
  # manual: update java-cacerts
  version: "20241010"
- epoch: 0
+ epoch: 1
  description: "CA certificates from the Mozilla trusted root program"
  copyright:
  - license: MPL-2.0 AND MIT
@@ -13,6 +13,7 @@ environment:
  - build-base
  - busybox
  - ca-certificates-bundle
+ - openssf-compiler-options
  - openssl-dev
  - perl
 

cairo.yaml

@@ -1,7 +1,7 @@
 package:
  name: cairo
  version: 1.18.2
- epoch: 0
+ epoch: 1
  description: A vector graphics library
  copyright:
  - license: LGPL-2.0-or-later OR MPL-1.1
@@ -22,6 +22,7 @@ environment:
  - libxext-dev
  - libxrender-dev
  - meson
+ - openssf-compiler-options
  - pixman-dev
  - xcb-util
  - xcb-util-dev

cdparanoia.yaml

@@ -1,7 +1,7 @@
 package:
  name: cdparanoia
  version: 10.2
- epoch: 5
+ epoch: 6
  description: An audio CD extraction application
  copyright:
  - license: GPL-2.0-or-later
@@ -16,6 +16,7 @@ environment:
  - ca-certificates-bundle
  - libtool
  - linux-headers
+ - openssf-compiler-options
 
 pipeline:
  - uses: fetch

cmake-bootstrap.yaml

@@ -1,7 +1,7 @@
 package:
  name: cmake-bootstrap
  version: 3.29.0
- epoch: 1
+ epoch: 2
  description: "Bootstrap CMake without using system libraries, enabling to use CMake to build system libraries used by CMake"
  dependencies:
  provider-priority: 5
@@ -15,6 +15,7 @@ environment:
  packages:
  - build-base
  - busybox
+ - openssf-compiler-options
  - openssl-dev
  - samurai
 

cmake.yaml

@@ -1,7 +1,7 @@
 package:
  name: cmake
  version: 3.29.0
- epoch: 2
+ epoch: 3
  description: "CMake is an open-source, cross-platform family of tools designed to build, test and package software"
  dependencies:
  provider-priority: 10
@@ -22,6 +22,7 @@ environment:
  - libuv-dev
  - ncurses-dev
  - nghttp2-dev
+ - openssf-compiler-options
  - openssl-dev
  - rhash-dev
  - samurai

expat.yaml

@@ -1,7 +1,7 @@
 package:
  name: expat
  version: 2.6.3
- epoch: 0
+ epoch: 1
  description: "XML SAX Parser library written in C"
  copyright:
  - license: MIT
@@ -12,6 +12,7 @@ environment:
  - build-base
  - busybox
  - ca-certificates-bundle
+ - openssf-compiler-options
 
 pipeline:
  - uses: fetch

falco-libs.yaml

@@ -1,7 +1,7 @@
 package:
  name: falco-libs
  version: 0.18.1
- epoch: 1
+ epoch: 2
  description: Foundational components necessary to build Falco
  copyright:
  - license: Apache-2.0
@@ -40,6 +40,7 @@ environment:
  - luajit
  - m4
  - make
+ - openssf-compiler-options
  - openssl-dev
  - patch
  - perl

falco-no-driver.yaml

@@ -1,7 +1,7 @@
 package:
  name: falco-no-driver
  version: 0.39.1
- epoch: 0
+ epoch: 1
  description: Cloud Native Runtime Security
  copyright:
  - license: Apache-2.0
@@ -31,6 +31,7 @@ environment:
  - libelf-static
  - libtool
  - mpc-dev
+ - openssf-compiler-options
  - openssl-dev
  - pkgconf
  - protobuf-dev

flux-image-automation-controller.yaml

@@ -1,7 +1,7 @@
 package:
  name: flux-image-automation-controller
  version: 0.39.0
- epoch: 0
+ epoch: 1
  description: GitOps Toolkit controller that patches container image tags in Git
  copyright:
  - license: Apache-2.0
@@ -15,6 +15,7 @@ environment:
  - gcc
  - go
  - llvm-lld-16
+ - openssf-compiler-options
 
 pipeline:
  - uses: git-checkout

flux-source-controller.yaml

@@ -1,7 +1,7 @@
 package:
  name: flux-source-controller
  version: 1.4.1
- epoch: 0
+ epoch: 1
  description: The GitOps Toolkit source management component
  copyright:
  - license: Apache-2.0
@@ -15,6 +15,7 @@ environment:
  - gcc
  - go
  - llvm-lld-16
+ - openssf-compiler-options
 
 pipeline:
  - uses: git-checkout

fluxbox.yaml

@@ -1,7 +1,7 @@
 package:
  name: fluxbox
  version: 1.3.7
- epoch: 2
+ epoch: 3
  description: Fluxbox Window Manager
  copyright:
  - license: GPL-2.0-or-later
@@ -29,6 +29,7 @@ environment:
  - libxpm-dev
  - libxrandr-dev
  - libxrender-dev
+ - openssf-compiler-options
  - pkgconf-dev
 
 pipeline:

gc.yaml

@@ -1,7 +1,7 @@
 package:
  name: gc
  version: 8.2.8
- epoch: 0
+ epoch: 1
  description: garbage collector for C and C++
  copyright:
  - license: Boehm-GC
@@ -14,6 +14,7 @@ environment:
  - build-base
  - busybox
  - ca-certificates-bundle
+ - openssf-compiler-options
 
 pipeline:
  - uses: fetch

go-1.20.yaml

@@ -1,7 +1,7 @@
 package:
  name: go-1.20
  version: 1.20.14
- epoch: 2
+ epoch: 3
  description: "the Go programming language"
  copyright:
  - license: BSD-3-Clause
@@ -21,6 +21,7 @@ environment:
  - busybox
  - ca-certificates-bundle
  - gcc-go
+ - openssf-compiler-options
 
 pipeline:
  - uses: fetch

haproxy-3.0.yaml

@@ -1,7 +1,7 @@
 package:
  name: haproxy-3.0
  version: 3.0.5
- epoch: 0
+ epoch: 1
  description: "A TCP/HTTP reverse proxy for high availability environments"
  copyright:
  - license: GPL-2.0-or-later
@@ -26,6 +26,7 @@ environment:
  - libcap-utils
  - linux-headers
  - lua5.3-dev
+ - openssf-compiler-options
  - openssl-dev
  - pcre2-dev
 

http-parser.yaml

@@ -1,7 +1,7 @@
 package:
  name: http-parser
  version: 2.9.4
- epoch: 5
+ epoch: 6
  description: "Parser for HTTP Request/Response written in C"
  copyright:
  - license: MIT
@@ -12,6 +12,7 @@ environment:
  - build-base
  - busybox
  - ca-certificates-bundle
+ - openssf-compiler-options
  - wolfi-base
 
 pipeline:

ingress-nginx-controller-1.11.yaml

@@ -3,7 +3,7 @@ package:
  name: ingress-nginx-controller-1.11
  version: 1.11.3
  # There are manual changes to review between each package update. See 'vars:' section.
- epoch: 1
+ epoch: 2
  description: "Ingress-NGINX Controller for Kubernetes"
  copyright:
  - license: Apache-2.0
@@ -108,6 +108,7 @@ environment:
  - mimalloc
  - modsecurity
  - msgpack
+ - openssf-compiler-options
  - openssh-client
  - openssl
  - openssl-dev

iperf.yaml

@@ -18,6 +18,7 @@ environment:
  - busybox
  - ca-certificates-bundle
  - linux-headers
+ - openssf-compiler-options
 
 pipeline:
  - uses: fetch