chore(deps): update zricethezav/gitleaks docker tag to v8.21.2 (#31)

Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>

.gitea/workflows/build.yaml

@@ -0,0 +1,91 @@
+name: "lint, build and push"
+on:
+  schedule:
+    - cron: "1 13 * * SUN"
+  push:
+    branches: [ master ]
+  pull_request:
+
+# Variables: https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables#default-environment-variables + https://forgejo.org/docs/latest/user/actions/#env-1
+
+jobs:
+  lint:
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Run Gitleaks
+        uses: docker://zricethezav/gitleaks:v8.21.2
+        with:
+          args: detect --no-git --verbose --source ${{ github.workspace }}
+      - name: Run hadolint
+        uses: docker://pipelinecomponents/hadolint:0.26.4
+        with:
+          args: hadolint Dockerfile
+#      - name: Run ShellCheck
+#        uses: sudo-bot/action-shellcheck@latest
+#        with:
+#          cli-args: "shell.sh"
+      - name: Send notification
+        uses: dawidd6/action-send-mail@v3
+        if: failure()
+        with:
+          connection_url: smtp://docker10.mgrote.net:1025
+          secure: false
+          ignore_cert: true
+          to: michael.grote@posteo.de
+          from: Gitea Actions <gitea@mgrote.net>
+          subject: "CI ${{ job.status }} in ${{ github.repository }}"
+          body: |
+            Repo: ${{ github.repository }}
+            Job: ${{ github.action }}
+            Status: ${{ job.status }}
+            Source: ${{ github.head_ref }}
+
+  build:
+    needs: [gitleaks, hadolint] # shellcheck
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+      - name: Extract repository name
+        id: name
+        run: |
+          echo REPO_NAME=$(echo ${GITHUB_REPOSITORY} | awk -F"/" '{print $2}') >> $GITHUB_OUTPUT
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            registry.mgrote.net/${{ steps.name.outputs.REPO_NAME }}
+          tags: |
+            type=raw,value=latest,enable={{is_default_branch}}
+            type=ref,event=branch
+            type=ref,event=pr
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+#      - name: Login to Docker Hub
+#        uses: docker/login-action@v3
+#        with:
+#          username: ${{ secrets.DOCKERHUB_USERNAME }}
+#          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Build and push Docker image
+        uses: https://github.com/docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+      - name: Send notification
+        uses: dawidd6/action-send-mail@v3
+        if: failure()
+        with:
+          connection_url: smtp://docker10.mgrote.net:1025
+          secure: false
+          ignore_cert: true
+          to: michael.grote@posteo.de
+          from: Gitea Actions <gitea@mgrote.net>
+          subject: "CI ${{ job.status }} in ${{ github.repository }}"
+          body: |
+            Repo: ${{ github.repository }}
+            Job: ${{ github.action }}
+            Status: ${{ job.status }}
+            Source: ${{ github.head_ref }}

.woodpecker/build.yml

@@ -1,31 +0,0 @@
----
-depends_on:
-  - lint
-steps:
-  selfhosted_tag:
-    image: plugins/docker@sha256:2f157400c2cb7de1b309b0f044f119375108218e54d38e1340e00b9f93abdefb
-    settings:
-      dockerfile: Dockerfile
-      repo: registry.mgrote.net/allzweckcontainer
-      registry: registry.mgrote.net
-      tags:
-        - ${CI_COMMIT_TAG}
-    when:
-      event:
-        - tag
-
-  selfhosted_push:
-    image: plugins/docker@sha256:2f157400c2cb7de1b309b0f044f119375108218e54d38e1340e00b9f93abdefb
-    settings:
-      dockerfile: Dockerfile
-      repo: registry.mgrote.net/allzweckcontainer
-      registry: registry.mgrote.net
-      tags:
-        - ${CI_COMMIT_SHA:0:8}
-        - ${CI_COMMIT_BRANCH}
-        - latest
-    when:
-      event:
-        exclude:
-          - pull_request
-          - tag

.woodpecker/lint.yml

@@ -1,35 +0,0 @@
----
-steps:
-  gitleaks:
-    image: zricethezav/gitleaks:v8.18.1
-    commands:
-      - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
-    when:
-      event:
-        exclude:
-          - tag
-
-  hadolint:
-    image: pipelinecomponents/hadolint:0.26.0
-    commands:
-      - hadolint Dockerfile
-    when:
-      event:
-        exclude:
-          - tag
-
-  shellcheck:
-    image: registry.mgrote.net/allzweckcontainer:latest
-    commands:
-      - |
-        find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do
-          if echo "$line" | grep -q "shell script"; then
-            file_path=$(echo "$line" | awk -F':' '{print $1}')
-            shellcheck "$file_path"
-          fi
-        done
-    when:
-      event:
-        exclude:
-          - tag
-...

Dockerfile

@@ -1,10 +1,10 @@
-FROM ubuntu:jammy
+FROM ubuntu:24.04
 
 ENV DEBIAN_FRONTEND=noninteractive
 
 # hadolint ignore=DL3008,DL3028
-RUN apt-get update && \
-	apt-get -y --no-install-recommends install \
+RUN apt-get update \
+	&& apt-get -y --no-install-recommends install \
 		build-essential \
 		wget \
 		rsync \
@@ -15,6 +15,5 @@ RUN apt-get update && \
 		curl \
 		yamllint \
 		s-nail \
-		shellcheck \
-	&& apt-get clean && \
-	rm -rf /var/lib/apt/lists/* /var/tmp/* /tmp/*
+	&& apt-get clean \
+	&& rm -rf /var/lib/apt/lists/* /var/tmp/* /tmp/*

README.md

@@ -1 +0,0 @@
-[![status-badge](https://ci.mgrote.net/api/badges/2/status.svg)](https://ci.mgrote.net/repos/2)

renovate.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://docs.renovatebot.com/renovate-schema.json",
   "extends": [
-    "config:base",
+    "config:recommended",
     "default:pinDigestsDisabled"
   ]
 }