---
steps:
  gitleaks:
    image: zricethezav/gitleaks:v8.18.1@sha256:6945c62ca019ead32bc337ab0c9fd055e98d82961765d38b7ccccc84dae95d0f
    commands:
      - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
    when:
      event:
        exclude:
          - tag

  hadolint:
    image: pipelinecomponents/hadolint:0.26.0@sha256:7122937006c7a9bcbb78ce764d3c2f0092f183b843ad128bc9fd6ea918e22d5b
    commands:
      - hadolint Dockerfile
    when:
      event:
        exclude:
          - tag

  shellcheck:
    image: registry.mgrote.net/allzweckcontainer
    commands:
      - |
        "if find . -type f -not -path '/.git/' -exec file {} ; | grep -q "shell script"; then
          find . -type f -not -path '/.git/' -exec file {} ; | grep "shell script" | awk -F':' '{print $1}' | xargs -n1 shellcheck
          exit 1
        else
          echo "No files specified."
          exit 0
        fi"
    when:
      event:
        exclude:
          - tag
...