allzweckcontainer/.woodpecker/lint.yml

32 lines
965 B
YAML
Raw Normal View History

2023-11-03 19:10:12 +01:00
---
steps:
gitleaks:
chore(deps): pin dependencies (#17) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | koalaman/shellcheck-alpine | | pinDigest | -> `bdcdfa7` | | [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint) | | pinDigest | -> `7122937` | | ubuntu | final | pinDigest | -> `e9569c2` | | [woodpeckerci/plugin-docker-buildx](https://codeberg.org/woodpecker-plugins/docker-buildx) ([source](https://codeberg.org/woodpecker-plugins/docker-buildx.git)) | | pinDigest | -> `c7ac0b0` | | [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) | | pinDigest | -> `eadfe25` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNjguMiIsInVwZGF0ZWRJblZlciI6IjM3LjE2OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=--> Reviewed-on: https://git.mgrote.net/container-images/allzweckcontainer/pulls/17 Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-02-02 22:54:03 +01:00
image: zricethezav/gitleaks:v8.18.2@sha256:eadfe256fa18d6a78a717abc9ed454c8e03865d1c46d627bca83977f4424901a
2023-11-03 19:10:12 +01:00
commands:
- gitleaks detect --no-git --verbose --source $CI_WORKSPACE
when:
event:
exclude:
- tag
2024-01-29 11:58:25 +01:00
2023-11-03 19:10:12 +01:00
hadolint:
chore(deps): pin dependencies (#17) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | koalaman/shellcheck-alpine | | pinDigest | -> `bdcdfa7` | | [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint) | | pinDigest | -> `7122937` | | ubuntu | final | pinDigest | -> `e9569c2` | | [woodpeckerci/plugin-docker-buildx](https://codeberg.org/woodpecker-plugins/docker-buildx) ([source](https://codeberg.org/woodpecker-plugins/docker-buildx.git)) | | pinDigest | -> `c7ac0b0` | | [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) | | pinDigest | -> `eadfe25` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNjguMiIsInVwZGF0ZWRJblZlciI6IjM3LjE2OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=--> Reviewed-on: https://git.mgrote.net/container-images/allzweckcontainer/pulls/17 Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-02-02 22:54:03 +01:00
image: pipelinecomponents/hadolint:0.26.0@sha256:7122937006c7a9bcbb78ce764d3c2f0092f183b843ad128bc9fd6ea918e22d5b
2023-11-03 19:10:12 +01:00
commands:
- hadolint Dockerfile
when:
event:
exclude:
- tag
2024-01-29 11:58:25 +01:00
shellcheck:
image: "koalaman/shellcheck-alpine:latest@sha256:eed99e46acb69ede0f68db4fd8f1b3b00cc09d66cb7d4d6f1f6296bd8833932d"
2024-02-02 22:18:14 +01:00
commands:
2024-01-29 12:02:01 +01:00
- |
2024-01-29 12:12:01 +01:00
find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do
if echo "$line" | grep -q "shell script"; then
file_path=$(echo "$line" | awk -F':' '{print $1}')
shellcheck "$file_path"
fi
done
2024-01-29 11:58:25 +01:00
...