f16f7884f0
chore(deps): update zricethezav/gitleaks docker tag to v8.18.2 ( #14 )
...
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks ) | patch | `v8.18.1` -> `v8.18.2` |
---
### Release Notes
<details>
<summary>gitleaks/gitleaks (zricethezav/gitleaks)</summary>
### [`v8.18.2`](https://github.com/gitleaks/gitleaks/releases/tag/v8.18.2 )
[Compare Source](https://github.com/gitleaks/gitleaks/compare/v8.18.1...v8.18.2 )
#### Changelog
- [`ac4b514`](https://github.com/gitleaks/gitleaks/commit/ac4b514 ) removed gitleaks user from Dockerfile ([#​1313](https://github.com/gitleaks/gitleaks/issues/1313 ))
- [`76c9e31`](https://github.com/gitleaks/gitleaks/commit/76c9e31 ) Remove IAM identifiers for non-credential resources in the aws-access-token rule ([#​1307](https://github.com/gitleaks/gitleaks/issues/1307 ))
- [`afe046b`](https://github.com/gitleaks/gitleaks/commit/afe046b ) Update stripe rule to not alert on publishable keys ([#​1320](https://github.com/gitleaks/gitleaks/issues/1320 ))
- [`8b8920d`](https://github.com/gitleaks/gitleaks/commit/8b8920d ) --max-target-megabytes flag now supported for --no-git flag as well ([#​1330](https://github.com/gitleaks/gitleaks/issues/1330 ))
- [`a59289c`](https://github.com/gitleaks/gitleaks/commit/a59289c ) add pre-commit hook gitleaks-system ([#​1225](https://github.com/gitleaks/gitleaks/issues/1225 ))
- [`870194b`](https://github.com/gitleaks/gitleaks/commit/870194b ) fix errors when using protect and an external git diff tool ([#​1318](https://github.com/gitleaks/gitleaks/issues/1318 ))
- [`179c607`](https://github.com/gitleaks/gitleaks/commit/179c607 ) rename filesystem to directory ([#​1317](https://github.com/gitleaks/gitleaks/issues/1317 ))
- [`8de8938`](https://github.com/gitleaks/gitleaks/commit/8de8938 ) Enhance Secret Descriptions ([#​1300](https://github.com/gitleaks/gitleaks/issues/1300 ))
- [`ca7aa14`](https://github.com/gitleaks/gitleaks/commit/ca7aa14 ) Small refactor `detect` and `sources` ([#​1297](https://github.com/gitleaks/gitleaks/issues/1297 ))
- [`01e60c8`](https://github.com/gitleaks/gitleaks/commit/01e60c8 ) chore(config): refactor to go generate; simplify configRules init ([#​1295](https://github.com/gitleaks/gitleaks/issues/1295 ))
- [`54f5f04`](https://github.com/gitleaks/gitleaks/commit/54f5f04 ) forgot symlinks
- [`221d5c4`](https://github.com/gitleaks/gitleaks/commit/221d5c4 ) pretty apparent 'protect' and 'detect' should be merged into one command ([#​1294](https://github.com/gitleaks/gitleaks/issues/1294 ))
- [`128b50f`](https://github.com/gitleaks/gitleaks/commit/128b50f ) style: sort the stopwords ([#​1289](https://github.com/gitleaks/gitleaks/issues/1289 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNjUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE2NS4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->
Reviewed-on: #14
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-02-01 21:51:00 +01:00
27878aa70b
ci: add shellcheck
2024-01-29 12:24:56 +01:00
415b91093f
chore(deps): update pipelinecomponents/hadolint docker tag to v0.26.0 ( #5 )
...
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint ) | minor | `0.25.9` -> `0.26.0` |
---
### Release Notes
<details>
<summary>pipeline-components/hadolint (pipelinecomponents/hadolint)</summary>
### [`v0.26.0`](https://gitlab.com/pipeline-components/hadolint/compare/v0.25.9...v0.26.0 )
[Compare Source](https://gitlab.com/pipeline-components/hadolint/compare/v0.25.9...v0.26.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->
Reviewed-on: #5
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:54:20 +01:00
626bd01c98
chore(deps): update zricethezav/gitleaks docker tag to v8.18.1 ( #3 )
...
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks ) | patch | `v8.18.0` -> `v8.18.1` |
---
### Release Notes
<details>
<summary>gitleaks/gitleaks (zricethezav/gitleaks)</summary>
### [`v8.18.1`](https://github.com/gitleaks/gitleaks/releases/tag/v8.18.1 )
[Compare Source](https://github.com/gitleaks/gitleaks/compare/v8.18.0...v8.18.1 )
#### Changelog
- [`dab7d02`](https://github.com/gitleaks/gitleaks/commit/dab7d02 ) dont crash on 100gb files pls ([#​1292](https://github.com/gitleaks/gitleaks/issues/1292 ))
- [`e63b657`](https://github.com/gitleaks/gitleaks/commit/e63b657 ) remove secretgroup from default config ([#​1288](https://github.com/gitleaks/gitleaks/issues/1288 ))
- [`20fcf50`](https://github.com/gitleaks/gitleaks/commit/20fcf50 ) feat: Hashicorp Terraform fields for password ([#​1237](https://github.com/gitleaks/gitleaks/issues/1237 ))
- [`b496677`](https://github.com/gitleaks/gitleaks/commit/b496677 ) perf: avoid allocations with `(*regexp.Regexp).MatchString` ([#​1283](https://github.com/gitleaks/gitleaks/issues/1283 ))
- [`a3ab4e8`](https://github.com/gitleaks/gitleaks/commit/a3ab4e8 ) refactor: more explicit rules ([#​1280](https://github.com/gitleaks/gitleaks/issues/1280 ))
- [`bd9a25a`](https://github.com/gitleaks/gitleaks/commit/bd9a25a ) bugfix: reduce false positives for stripe tokens by using word boundaries in regex ([#​1278](https://github.com/gitleaks/gitleaks/issues/1278 ))
- [`6d0d8b5`](https://github.com/gitleaks/gitleaks/commit/6d0d8b5 ) add Infracost API rule ([#​1273](https://github.com/gitleaks/gitleaks/issues/1273 ))
- [`2959fc0`](https://github.com/gitleaks/gitleaks/commit/2959fc0 ) refactor: simplify test asserts ([#​1271](https://github.com/gitleaks/gitleaks/issues/1271 ))
- [`d37b38f`](https://github.com/gitleaks/gitleaks/commit/d37b38f ) Update Makefile
- [`14b1ca9`](https://github.com/gitleaks/gitleaks/commit/14b1ca9 ) refactor: change detect tests to t.Fatal instead of log.Fatal ([#​1270](https://github.com/gitleaks/gitleaks/issues/1270 ))
- [`d9f86d6`](https://github.com/gitleaks/gitleaks/commit/d9f86d6 ) feat(rules): Add detection for Scalingo API Token ([#​1262](https://github.com/gitleaks/gitleaks/issues/1262 ))
- [`ed34259`](https://github.com/gitleaks/gitleaks/commit/ed34259 ) feat(jwt): detect base64-encoded tokens ([#​1256](https://github.com/gitleaks/gitleaks/issues/1256 ))
- [`0d5e46f`](https://github.com/gitleaks/gitleaks/commit/0d5e46f ) feat: add --ignore-gitleaks-allow cmd flag ([#​1260](https://github.com/gitleaks/gitleaks/issues/1260 ))
- [`a82ac29`](https://github.com/gitleaks/gitleaks/commit/a82ac29 ) switch out libs ([#​1259](https://github.com/gitleaks/gitleaks/issues/1259 ))
- [`0b84afa`](https://github.com/gitleaks/gitleaks/commit/0b84afa ) fix: no-color option should also affect zerolog output ([#​1242](https://github.com/gitleaks/gitleaks/issues/1242 ))
- [`8976539`](https://github.com/gitleaks/gitleaks/commit/8976539 ) Fixed lineEnd indexing if the match is the whole line ([#​1223](https://github.com/gitleaks/gitleaks/issues/1223 ))
- [`30c6117`](https://github.com/gitleaks/gitleaks/commit/30c6117 ) feat: Add optional redaction value, default 100 ([#​1229](https://github.com/gitleaks/gitleaks/issues/1229 ))
- [`e9135cf`](https://github.com/gitleaks/gitleaks/commit/e9135cf ) fix(jwt): longer segment lengths ([#​1214](https://github.com/gitleaks/gitleaks/issues/1214 ))
- [`f65f915`](https://github.com/gitleaks/gitleaks/commit/f65f915 ) Added yarn.lock file to default allowlist paths ([#​1258](https://github.com/gitleaks/gitleaks/issues/1258 ))
- [`abfd0f3`](https://github.com/gitleaks/gitleaks/commit/abfd0f3 ) Update README.md
- [`18283bb`](https://github.com/gitleaks/gitleaks/commit/18283bb ) feat(rules): make case insensitivity optional ([#​1215](https://github.com/gitleaks/gitleaks/issues/1215 ))
- [`9fb36b2`](https://github.com/gitleaks/gitleaks/commit/9fb36b2 ) feat(rules): detect Hugging Face access tokens ([#​1204](https://github.com/gitleaks/gitleaks/issues/1204 ))
- [`db4bc0f`](https://github.com/gitleaks/gitleaks/commit/db4bc0f ) Resolve [#​1170](https://github.com/gitleaks/gitleaks/issues/1170 ) - Enable selection of a single rule ([#​1183](https://github.com/gitleaks/gitleaks/issues/1183 ))
- [`3cbcda2`](https://github.com/gitleaks/gitleaks/commit/3cbcda2 ) Update authress.go to include alternate form account dash (-) ([#​1224](https://github.com/gitleaks/gitleaks/issues/1224 ))
- [`46c6272`](https://github.com/gitleaks/gitleaks/commit/46c6272 ) refactor: remove unnecessary removing temp files in tests ([#​1255](https://github.com/gitleaks/gitleaks/issues/1255 ))
- [`963a697`](https://github.com/gitleaks/gitleaks/commit/963a697 ) refactor: use os.ReadFile instead of os.Open + io.ReadAll ([#​1254](https://github.com/gitleaks/gitleaks/issues/1254 ))
- [`163ec21`](https://github.com/gitleaks/gitleaks/commit/163ec21 ) fix(sumologic): improve patterns ([#​1218](https://github.com/gitleaks/gitleaks/issues/1218 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->
Reviewed-on: #3
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:53:50 +01:00
686eb94538
chore(deps): pin dependencies ( #2 )
...
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| alpine | final | pinDigest | -> `51b6726` |
| koalaman/shellcheck-alpine | | pinDigest | -> `f73b035` |
| [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint ) | | pinDigest | -> `430e949` |
| plugins/docker | | pinDigest | -> `2f15740` |
| [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks ) | | pinDigest | -> `e5f6d1a` |
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions ) if that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->
Reviewed-on: #2
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:48:24 +01:00
31945f0f9a
ci: set image for hadolint
2024-01-26 23:28:00 +01:00
4f086b008d
ci: set tag for gitleaks
2024-01-26 22:51:12 +01:00
d655c811c1
ci: fix woodpecker warnings
2024-01-24 20:01:21 +01:00
c01a58c9b3
ci: shellcheck -x
2023-11-09 09:06:21 +01:00
21278feb22
ci: enable shellcheck
2023-11-09 08:57:51 +01:00
fda096686d
ci: disable shellcheck
2023-11-08 16:26:14 +01:00
08f853cd2d
ci: add shellcheck
2023-11-03 19:31:52 +01:00
c3d9d911df
drone -> woodpecker
2023-11-03 19:23:41 +01:00
