2023-11-13 10:31:34 +01:00
|
|
|
---
|
|
|
|
steps:
|
|
|
|
gitleaks:
|
2024-06-03 02:12:35 +02:00
|
|
|
image: zricethezav/gitleaks:v8.18.3
|
2023-11-13 10:31:34 +01:00
|
|
|
commands:
|
|
|
|
- gitleaks detect --no-git --verbose --source $CI_WORKSPACE
|
|
|
|
when:
|
2024-05-14 21:44:37 +02:00
|
|
|
- event: [push, pull_request, cron]
|
2024-05-06 23:54:01 +02:00
|
|
|
evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
|
2023-11-13 10:31:34 +01:00
|
|
|
|
|
|
|
hadolint:
|
2024-05-16 02:01:25 +02:00
|
|
|
image: pipelinecomponents/hadolint:0.26.2
|
2023-11-13 10:31:34 +01:00
|
|
|
commands:
|
|
|
|
- hadolint Dockerfile
|
|
|
|
when:
|
2024-05-14 21:44:37 +02:00
|
|
|
- event: [push, pull_request, cron]
|
2024-05-06 23:54:01 +02:00
|
|
|
evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
|
2023-11-13 10:31:34 +01:00
|
|
|
|
|
|
|
shellcheck:
|
2024-04-04 20:22:52 +02:00
|
|
|
image: "koalaman/shellcheck-alpine:v0.10.0"
|
2023-11-13 10:31:34 +01:00
|
|
|
commands:
|
2024-01-29 12:20:23 +01:00
|
|
|
- |
|
|
|
|
find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do
|
|
|
|
if echo "$line" | grep -q "shell script"; then
|
|
|
|
file_path=$(echo "$line" | awk -F':' '{print $1}')
|
|
|
|
shellcheck "$file_path"
|
|
|
|
fi
|
|
|
|
done
|
2024-02-06 20:15:48 +01:00
|
|
|
when:
|
2024-05-14 21:44:37 +02:00
|
|
|
- event: [push, pull_request, cron]
|
2024-05-06 23:54:01 +02:00
|
|
|
evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
|
2024-01-29 12:20:23 +01:00
|
|
|
...
|