fork: make it same as master branch

Signed-off-by: Philippe Scorsolini <[email protected]>

.github/workflows/ci.yml

@@ -378,12 +378,41 @@ jobs:
           username: ${{ secrets.DOCKER_USR }}
           password: ${{ secrets.DOCKER_PSW }}
 
-      - name: Publish Artifacts to Docker Hub
+      - name: Publish Artifacts to DockerHub
         run: make -j2 publish BRANCH_NAME=${GITHUB_REF##*/}
 
-      - name: Promote Artifacts in Docker Hub
+      - name: Promote Artifacts in DockerHub
         if: github.ref == 'refs/heads/master' && env.DOCKER_USR != ''
         run: make -j2 promote
         env:
           BRANCH_NAME: master
           CHANNEL: master
+
+  fuzz-test:
+    runs-on: ubuntu-22.04
+    needs: detect-noop
+    if: needs.detect-noop.outputs.noop != 'true'
+
+    steps:
+      # TODO(negz): Can we make this use our Go build and dependency cache? It
+      # seems to build Crossplane inside of a Docker image.
+      - name: Build Fuzzers
+        id: build
+        uses: google/oss-fuzz/infra/cifuzz/actions/build_fuzzers@master
+        with:
+          oss-fuzz-project-name: "crossplane"
+          language: go
+
+      - name: Run Fuzzers
+        uses: google/oss-fuzz/infra/cifuzz/actions/run_fuzzers@master
+        with:
+          oss-fuzz-project-name: "crossplane"
+          fuzz-seconds: 300
+          language: go
+
+      - name: Upload Crash
+        uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3
+        if: failure() && steps.build.outcome == 'success'
+        with:
+          name: artifacts
+          path: ./out/artifacts

.github/workflows/promote.yml

@@ -15,8 +15,8 @@ env:
   # Common versions
   GO_VERSION: '1.20.6'
 
-  # Common users. We can't run a step 'if secrets.DOCKER_USR != ""' but we can run
-  # a step 'if env.DOCKER_USR' != ""', so we copy these to succinctly test whether
+  # Common users. We can't run a step 'if secrets.AWS_USR != ""' but we can run
+  # a step 'if env.AWS_USR' != ""', so we copy these to succinctly test whether
   # credentials have been provided before trying to run steps that need them.
   DOCKER_USR: ${{ secrets.DOCKER_USR }}
 
@@ -45,7 +45,7 @@ jobs:
           username: ${{ secrets.DOCKER_USR }}
           password: ${{ secrets.DOCKER_PSW }}
 
-      - name: Promote Artifacts in Docker Hub
+      - name: Promote Artifacts in DockerHub
         run: make -j2 promote BRANCH_NAME=${GITHUB_REF##*/}
         env:
           VERSION: ${{ github.event.inputs.version }}

.github/workflows/stale.yml

@@ -0,0 +1,47 @@
+name: Stale Issues and PRs
+on:
+  schedule:
+  # Process new stale issues once a day. Folks can /fresh for a fast un-stale
+  # per the commands workflow. Run at 1:15 mostly as a somewhat unique time to
+  # help correlate any issues with this workflow.
+  - cron: '15 1 * * *'
+  workflow_dispatch: {}
+
+permissions:
+  issues: write
+  pull-requests: write
+
+jobs:
+  stale:
+    runs-on: ubuntu-22.04
+    steps:
+    - uses: actions/stale@1160a2240286f5da8ec72b1c0816ce2481aabf84 # v8
+      with:
+        # This action uses ~2 operations per stale issue per run to determine
+        # whether it's still stale. It also uses 2-3 operations to mark an issue
+        # stale or not. During steady state (no issues to mark stale, check, or
+        # close) we seem to use less than 10 operations with ~150 issues and PRs
+        # open.
+        #
+        # Our hourly rate-limit budget for all workflows that use GITHUB_TOKEN
+        # is 1,000 requests per the below docs.
+        # https://docs.github.com/en/rest/overview/resources-in-the-rest-api#requests-from-github-actions
+        operations-per-run: 100
+        days-before-stale: 90
+        days-before-close: 14
+        stale-issue-label: stale
+        exempt-issue-labels: exempt-from-stale
+        stale-issue-message: >
+          Crossplane does not currently have enough maintainers to address every
+          issue and pull request. This issue has been automatically marked as
+          `stale` because it has had no activity in the last 90 days. It will be
+          closed in 14 days if no further activity occurs. Leaving a comment
+          **starting with** `/fresh` will mark this issue as not stale.
+        stale-pr-label: stale
+        exempt-pr-labels: exempt-from-stale
+        stale-pr-message:
+          Crossplane does not currently have enough maintainers to address every
+          issue and pull request. This pull request has been automatically
+          marked as `stale` because it has had no activity in the last 90 days.
+          It will be closed in 14 days if no further activity occurs.
+          Adding a comment **starting with** `/fresh` will mark this PR as not stale.

cmd/crossplane/core/core.go

@@ -192,6 +192,7 @@ func (c *startCommand) Run(s *runtime.Scheme, log logging.Logger) error { //noli
 	if !c.EnableCompositionRevisions {
 		log.Info("CompositionRevisions feature is GA and cannot be disabled. The --enable-composition-revisions flag will be removed in a future release.")
 	}
+
 	if c.EnableProviderIdentity {
 		feats.Enable(features.EnableProviderIdentity)
 		log.Info("Alpha feature enabled", "flag", features.EnableProviderIdentity)

internal/features/features.go

@@ -29,6 +29,7 @@ const (
 	// External Secret Stores. See the below design for more details.
 	// https://github.com/crossplane/crossplane/blob/390ddd/design/design-doc-external-secret-stores.md
 	EnableAlphaExternalSecretStores feature.Flag = "EnableAlphaExternalSecretStores"
+
 	// EnableAlphaCompositionFunctions enables alpha support for composition
 	// functions. See the below design for more details.
 	// https://github.com/crossplane/crossplane/blob/9ee7a2/design/design-doc-composition-functions.md