From 0747c2baec08301ffd93ec44358151855378e0d4 Mon Sep 17 00:00:00 2001 From: Michael Grote Date: Mon, 29 Jan 2024 14:44:38 +0100 Subject: [PATCH] renovate: disabled digest pinning --- image triggert sich sonst selbst --- .woodpecker/lint.yml | 6 +++--- Dockerfile | 2 +- renovate.json | 3 ++- 3 files changed, 6 insertions(+), 5 deletions(-) diff --git a/.woodpecker/lint.yml b/.woodpecker/lint.yml index fb396bd..a6a680a 100644 --- a/.woodpecker/lint.yml +++ b/.woodpecker/lint.yml @@ -1,7 +1,7 @@ --- steps: gitleaks: - image: zricethezav/gitleaks:v8.18.1@sha256:6945c62ca019ead32bc337ab0c9fd055e98d82961765d38b7ccccc84dae95d0f + image: zricethezav/gitleaks:v8.18.1 commands: - gitleaks detect --no-git --verbose --source $CI_WORKSPACE when: @@ -10,7 +10,7 @@ steps: - tag hadolint: - image: pipelinecomponents/hadolint:0.26.0@sha256:7122937006c7a9bcbb78ce764d3c2f0092f183b843ad128bc9fd6ea918e22d5b + image: pipelinecomponents/hadolint:0.26.0 commands: - hadolint Dockerfile when: @@ -19,7 +19,7 @@ steps: - tag shellcheck: - image: registry.mgrote.net/allzweckcontainer@sha256:46ce0ba99ea33f4e969a3124648014e23d2166c4b3a982a431b144d5339ffa07 + image: registry.mgrote.net/allzweckcontainer:latest commands: - | find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do diff --git a/Dockerfile b/Dockerfile index 124117c..1eb6e7a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM ubuntu:jammy@sha256:e6173d4dc55e76b87c4af8db8821b1feae4146dd47341e4d431118c7dd060a74 +FROM ubuntu:jammy ENV DEBIAN_FRONTEND=noninteractive diff --git a/renovate.json b/renovate.json index 39a2b6e..8b7515a 100644 --- a/renovate.json +++ b/renovate.json @@ -1,6 +1,7 @@ { "$schema": "https://docs.renovatebot.com/renovate-schema.json", "extends": [ - "config:base" + "config:base", + "default:pinDigestsDisabled" ] }