From e1e6759a452d641e5167ffdb34ccf3b1437b990e Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Sun, 3 May 2026 19:31:23 +0000 Subject: [PATCH] ci(validate-kubernetes): pin kube-score to v1.20.0 (current latest) Previous v1.20.1 pin returned 404 from the releases endpoint; latest upstream tag is v1.20.0 per https://github.com/zegl/kube-score/releases/latest. Locally verified the tarball extracts cleanly to a kube-score binary + LICENSE. Also adds -f to curl so HTTP errors fail the step immediately instead of saving an HTML 404 body to disk and failing later in tar. Co-Authored-By: Nakamoto, S --- .github/workflows/validation.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.github/workflows/validation.yml b/.github/workflows/validation.yml index df8aa1e..d5ed971 100644 --- a/.github/workflows/validation.yml +++ b/.github/workflows/validation.yml @@ -74,8 +74,9 @@ jobs: - name: Install kube-score run: | - curl -sSL -o /tmp/kube-score.tar.gz \ - https://github.com/zegl/kube-score/releases/download/v1.20.1/kube-score_1.20.1_linux_amd64.tar.gz + # Latest upstream as of this commit; bump as needed. + curl -fsSL -o /tmp/kube-score.tar.gz \ + https://github.com/zegl/kube-score/releases/download/v1.20.0/kube-score_1.20.0_linux_amd64.tar.gz tar -xzf /tmp/kube-score.tar.gz -C /tmp sudo mv /tmp/kube-score /usr/local/bin/kube-score kube-score version