renovate: disabled digest pinning

---
image triggert sich sonst selbst
This commit is contained in:
Michael Grote 2024-01-29 14:44:38 +01:00
parent a19a6af33f
commit 0747c2baec
3 changed files with 6 additions and 5 deletions

View file

@ -1,7 +1,7 @@
--- ---
steps: steps:
gitleaks: gitleaks:
image: zricethezav/gitleaks:v8.18.1@sha256:6945c62ca019ead32bc337ab0c9fd055e98d82961765d38b7ccccc84dae95d0f image: zricethezav/gitleaks:v8.18.1
commands: commands:
- gitleaks detect --no-git --verbose --source $CI_WORKSPACE - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
when: when:
@ -10,7 +10,7 @@ steps:
- tag - tag
hadolint: hadolint:
image: pipelinecomponents/hadolint:0.26.0@sha256:7122937006c7a9bcbb78ce764d3c2f0092f183b843ad128bc9fd6ea918e22d5b image: pipelinecomponents/hadolint:0.26.0
commands: commands:
- hadolint Dockerfile - hadolint Dockerfile
when: when:
@ -19,7 +19,7 @@ steps:
- tag - tag
shellcheck: shellcheck:
image: registry.mgrote.net/allzweckcontainer@sha256:46ce0ba99ea33f4e969a3124648014e23d2166c4b3a982a431b144d5339ffa07 image: registry.mgrote.net/allzweckcontainer:latest
commands: commands:
- | - |
find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do

View file

@ -1,4 +1,4 @@
FROM ubuntu:jammy@sha256:e6173d4dc55e76b87c4af8db8821b1feae4146dd47341e4d431118c7dd060a74 FROM ubuntu:jammy
ENV DEBIAN_FRONTEND=noninteractive ENV DEBIAN_FRONTEND=noninteractive

View file

@ -1,6 +1,7 @@
{ {
"$schema": "https://docs.renovatebot.com/renovate-schema.json", "$schema": "https://docs.renovatebot.com/renovate-schema.json",
"extends": [ "extends": [
"config:base" "config:base",
"default:pinDigestsDisabled"
] ]
} }