Commit graph

20 commits

Author SHA1 Message Date
c78b0a9719 ci: new default workflow for images
All checks were successful
ci/woodpecker/push/lint Pipeline was successful
ci/woodpecker/push/build Pipeline was successful
2024-05-06 23:55:34 +02:00
95ec7d402d ci: shellcheck: set tag to v0.10.0
All checks were successful
ci/woodpecker/push/lint Pipeline was successful
ci/woodpecker/push/build Pipeline was successful
2024-04-04 20:21:47 +02:00
48f715b077 chore(deps): update pipelinecomponents/hadolint docker tag to v0.26.1 2024-02-19 23:35:29 +00:00
447b7f8b05 remove image digest 2024-02-07 15:14:27 +01:00
572a4cb08d ci: dont run on renovate updates 2024-02-06 20:17:24 +01:00
857b372e0b chore(deps): update koalaman/shellcheck-alpine:latest docker digest to eed99e4 2024-02-06 19:05:19 +00:00
59bd5282d3 chore(deps): update koalaman/shellcheck-alpine:latest docker digest to 7b0682c (#12)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| koalaman/shellcheck-alpine | digest | `bdcdfa7` -> `7b0682c` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNjguMiIsInVwZGF0ZWRJblZlciI6IjM3LjE2OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #12
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-02-06 18:55:50 +01:00
762080485a chore(deps): pin dependencies (#11)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| koalaman/shellcheck-alpine | pinDigest |  -> `bdcdfa7` |
| [woodpeckerci/plugin-docker-buildx](https://codeberg.org/woodpecker-plugins/docker-buildx) ([source](https://codeberg.org/woodpecker-plugins/docker-buildx.git)) | pinDigest |  -> `c7ac0b0` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNjguMiIsInVwZGF0ZWRJblZlciI6IjM3LjE2OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #11
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-02-02 22:54:27 +01:00
202e3be692 ci: replace shellcheck image 2024-02-02 22:38:40 +01:00
9fa656c2fa chore(deps): update registry.mgrote.net/allzweckcontainer docker tag to v1.0.131 (#10)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [registry.mgrote.net/allzweckcontainer](https://git.mgrote.net/container-images/allzweckcontainer) ([source](https://git.mgrote.net/container-images/allzweckcontainer.git)) | patch | `1.0.120` -> `v1.0.131` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNjguMiIsInVwZGF0ZWRJblZlciI6IjM3LjE2OC4yIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #10
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-02-02 22:21:53 +01:00
4f52587a68 ci: shellcheck, set tag instead of latest 2024-02-02 22:10:06 +01:00
4b97e661b6 chore(deps): update zricethezav/gitleaks docker tag to v8.18.2 (#9)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) | patch | `v8.18.1` -> `v8.18.2` |

---

### Release Notes

<details>
<summary>gitleaks/gitleaks (zricethezav/gitleaks)</summary>

### [`v8.18.2`](https://github.com/gitleaks/gitleaks/releases/tag/v8.18.2)

[Compare Source](https://github.com/gitleaks/gitleaks/compare/v8.18.1...v8.18.2)

#### Changelog

-   [`ac4b514`](https://github.com/gitleaks/gitleaks/commit/ac4b514) removed gitleaks user from Dockerfile ([#&#8203;1313](https://github.com/gitleaks/gitleaks/issues/1313))
-   [`76c9e31`](https://github.com/gitleaks/gitleaks/commit/76c9e31) Remove IAM identifiers for non-credential resources in the aws-access-token rule ([#&#8203;1307](https://github.com/gitleaks/gitleaks/issues/1307))
-   [`afe046b`](https://github.com/gitleaks/gitleaks/commit/afe046b) Update stripe rule to not alert on publishable keys ([#&#8203;1320](https://github.com/gitleaks/gitleaks/issues/1320))
-   [`8b8920d`](https://github.com/gitleaks/gitleaks/commit/8b8920d) --max-target-megabytes flag now supported for --no-git flag as well ([#&#8203;1330](https://github.com/gitleaks/gitleaks/issues/1330))
-   [`a59289c`](https://github.com/gitleaks/gitleaks/commit/a59289c) add pre-commit hook gitleaks-system ([#&#8203;1225](https://github.com/gitleaks/gitleaks/issues/1225))
-   [`870194b`](https://github.com/gitleaks/gitleaks/commit/870194b) fix errors when using protect and an external git diff tool ([#&#8203;1318](https://github.com/gitleaks/gitleaks/issues/1318))
-   [`179c607`](https://github.com/gitleaks/gitleaks/commit/179c607) rename filesystem to directory ([#&#8203;1317](https://github.com/gitleaks/gitleaks/issues/1317))
-   [`8de8938`](https://github.com/gitleaks/gitleaks/commit/8de8938) Enhance Secret Descriptions  ([#&#8203;1300](https://github.com/gitleaks/gitleaks/issues/1300))
-   [`ca7aa14`](https://github.com/gitleaks/gitleaks/commit/ca7aa14) Small refactor `detect` and `sources` ([#&#8203;1297](https://github.com/gitleaks/gitleaks/issues/1297))
-   [`01e60c8`](https://github.com/gitleaks/gitleaks/commit/01e60c8) chore(config): refactor to go generate; simplify configRules init ([#&#8203;1295](https://github.com/gitleaks/gitleaks/issues/1295))
-   [`54f5f04`](https://github.com/gitleaks/gitleaks/commit/54f5f04) forgot symlinks
-   [`221d5c4`](https://github.com/gitleaks/gitleaks/commit/221d5c4) pretty apparent 'protect' and 'detect' should be merged into one command ([#&#8203;1294](https://github.com/gitleaks/gitleaks/issues/1294))
-   [`128b50f`](https://github.com/gitleaks/gitleaks/commit/128b50f) style: sort the stopwords ([#&#8203;1289](https://github.com/gitleaks/gitleaks/issues/1289))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNjUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE2NS4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #9
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-02-01 21:50:56 +01:00
4f6c9e4181 ci: add shellcheck 2024-01-29 12:22:59 +01:00
c1da92a17f chore(deps): update pipelinecomponents/hadolint docker tag to v0.26.0 (#5)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint) | minor | `0.25.9` -> `0.26.0` |

---

### Release Notes

<details>
<summary>pipeline-components/hadolint (pipelinecomponents/hadolint)</summary>

### [`v0.26.0`](https://gitlab.com/pipeline-components/hadolint/compare/v0.25.9...v0.26.0)

[Compare Source](https://gitlab.com/pipeline-components/hadolint/compare/v0.25.9...v0.26.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #5
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:54:28 +01:00
8811ab705c chore(deps): update zricethezav/gitleaks docker tag to v8.18.1 (#3)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) | patch | `v8.18.0` -> `v8.18.1` |

---

### Release Notes

<details>
<summary>gitleaks/gitleaks (zricethezav/gitleaks)</summary>

### [`v8.18.1`](https://github.com/gitleaks/gitleaks/releases/tag/v8.18.1)

[Compare Source](https://github.com/gitleaks/gitleaks/compare/v8.18.0...v8.18.1)

#### Changelog

-   [`dab7d02`](https://github.com/gitleaks/gitleaks/commit/dab7d02) dont crash on 100gb files pls ([#&#8203;1292](https://github.com/gitleaks/gitleaks/issues/1292))
-   [`e63b657`](https://github.com/gitleaks/gitleaks/commit/e63b657) remove secretgroup from default config ([#&#8203;1288](https://github.com/gitleaks/gitleaks/issues/1288))
-   [`20fcf50`](https://github.com/gitleaks/gitleaks/commit/20fcf50) feat: Hashicorp Terraform fields for password ([#&#8203;1237](https://github.com/gitleaks/gitleaks/issues/1237))
-   [`b496677`](https://github.com/gitleaks/gitleaks/commit/b496677) perf: avoid allocations with `(*regexp.Regexp).MatchString` ([#&#8203;1283](https://github.com/gitleaks/gitleaks/issues/1283))
-   [`a3ab4e8`](https://github.com/gitleaks/gitleaks/commit/a3ab4e8) refactor: more explicit rules ([#&#8203;1280](https://github.com/gitleaks/gitleaks/issues/1280))
-   [`bd9a25a`](https://github.com/gitleaks/gitleaks/commit/bd9a25a) bugfix: reduce false positives for stripe tokens by using word boundaries in regex ([#&#8203;1278](https://github.com/gitleaks/gitleaks/issues/1278))
-   [`6d0d8b5`](https://github.com/gitleaks/gitleaks/commit/6d0d8b5) add Infracost API rule ([#&#8203;1273](https://github.com/gitleaks/gitleaks/issues/1273))
-   [`2959fc0`](https://github.com/gitleaks/gitleaks/commit/2959fc0) refactor: simplify test asserts ([#&#8203;1271](https://github.com/gitleaks/gitleaks/issues/1271))
-   [`d37b38f`](https://github.com/gitleaks/gitleaks/commit/d37b38f) Update Makefile
-   [`14b1ca9`](https://github.com/gitleaks/gitleaks/commit/14b1ca9) refactor: change detect tests to t.Fatal instead of log.Fatal ([#&#8203;1270](https://github.com/gitleaks/gitleaks/issues/1270))
-   [`d9f86d6`](https://github.com/gitleaks/gitleaks/commit/d9f86d6) feat(rules): Add detection for Scalingo API Token ([#&#8203;1262](https://github.com/gitleaks/gitleaks/issues/1262))
-   [`ed34259`](https://github.com/gitleaks/gitleaks/commit/ed34259) feat(jwt): detect base64-encoded tokens ([#&#8203;1256](https://github.com/gitleaks/gitleaks/issues/1256))
-   [`0d5e46f`](https://github.com/gitleaks/gitleaks/commit/0d5e46f) feat: add --ignore-gitleaks-allow cmd flag ([#&#8203;1260](https://github.com/gitleaks/gitleaks/issues/1260))
-   [`a82ac29`](https://github.com/gitleaks/gitleaks/commit/a82ac29) switch out libs ([#&#8203;1259](https://github.com/gitleaks/gitleaks/issues/1259))
-   [`0b84afa`](https://github.com/gitleaks/gitleaks/commit/0b84afa) fix: no-color option should also affect zerolog output ([#&#8203;1242](https://github.com/gitleaks/gitleaks/issues/1242))
-   [`8976539`](https://github.com/gitleaks/gitleaks/commit/8976539) Fixed lineEnd indexing if the match is the whole line ([#&#8203;1223](https://github.com/gitleaks/gitleaks/issues/1223))
-   [`30c6117`](https://github.com/gitleaks/gitleaks/commit/30c6117) feat: Add optional redaction value, default 100 ([#&#8203;1229](https://github.com/gitleaks/gitleaks/issues/1229))
-   [`e9135cf`](https://github.com/gitleaks/gitleaks/commit/e9135cf) fix(jwt): longer segment lengths ([#&#8203;1214](https://github.com/gitleaks/gitleaks/issues/1214))
-   [`f65f915`](https://github.com/gitleaks/gitleaks/commit/f65f915) Added yarn.lock file to default allowlist paths ([#&#8203;1258](https://github.com/gitleaks/gitleaks/issues/1258))
-   [`abfd0f3`](https://github.com/gitleaks/gitleaks/commit/abfd0f3) Update README.md
-   [`18283bb`](https://github.com/gitleaks/gitleaks/commit/18283bb) feat(rules): make case insensitivity optional ([#&#8203;1215](https://github.com/gitleaks/gitleaks/issues/1215))
-   [`9fb36b2`](https://github.com/gitleaks/gitleaks/commit/9fb36b2) feat(rules): detect Hugging Face access tokens ([#&#8203;1204](https://github.com/gitleaks/gitleaks/issues/1204))
-   [`db4bc0f`](https://github.com/gitleaks/gitleaks/commit/db4bc0f) Resolve [#&#8203;1170](https://github.com/gitleaks/gitleaks/issues/1170) - Enable selection of a single rule  ([#&#8203;1183](https://github.com/gitleaks/gitleaks/issues/1183))
-   [`3cbcda2`](https://github.com/gitleaks/gitleaks/commit/3cbcda2) Update authress.go to include alternate form account dash (-) ([#&#8203;1224](https://github.com/gitleaks/gitleaks/issues/1224))
-   [`46c6272`](https://github.com/gitleaks/gitleaks/commit/46c6272) refactor: remove unnecessary removing temp files in tests ([#&#8203;1255](https://github.com/gitleaks/gitleaks/issues/1255))
-   [`963a697`](https://github.com/gitleaks/gitleaks/commit/963a697) refactor: use os.ReadFile instead of os.Open + io.ReadAll ([#&#8203;1254](https://github.com/gitleaks/gitleaks/issues/1254))
-   [`163ec21`](https://github.com/gitleaks/gitleaks/commit/163ec21) fix(sumologic): improve patterns ([#&#8203;1218](https://github.com/gitleaks/gitleaks/issues/1218))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #3
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:51:22 +01:00
ebd4e96948 chore(deps): pin dependencies (#2)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| alpine | final | pinDigest |  -> `51b6726` |
| alpine | stage | pinDigest |  -> `51b6726` |
| [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint) |  | pinDigest |  -> `430e949` |
| [thegeeklab/drone-docker-buildx](https://github.com/thegeeklab/drone-docker-buildx) |  | pinDigest |  -> `2c5226d` |
| [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) |  | pinDigest |  -> `e5f6d1a` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #2
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:48:33 +01:00
b272a8c17e ci: set image for hadolint 2024-01-26 23:29:01 +01:00
c6800a3044 ci: set tag for gitleaks 2024-01-26 22:53:05 +01:00
8e6472e491 ci: fix woodpecker warnings 2024-01-24 20:02:51 +01:00
15f03a20ce drone -> woodpecker 2023-11-07 15:36:33 +01:00