Renovate Bot
686eb94538
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | alpine | final | pinDigest | -> `51b6726` | | koalaman/shellcheck-alpine | | pinDigest | -> `f73b035` | | [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint) | | pinDigest | -> `430e949` | | plugins/docker | | pinDigest | -> `2f15740` | | [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) | | pinDigest | -> `e5f6d1a` | --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=--> Reviewed-on: #2 Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
28 lines
755 B
YAML
28 lines
755 B
YAML
---
|
|
steps:
|
|
gitleaks:
|
|
image: zricethezav/gitleaks:v8.18.0@sha256:e5f6d1a62786affd1abd882ecc73e9353ce78adea1650711f6e351767723712d
|
|
commands:
|
|
- gitleaks detect --no-git --verbose --source $CI_WORKSPACE
|
|
when:
|
|
event:
|
|
exclude:
|
|
- tag
|
|
|
|
hadolint:
|
|
image: pipelinecomponents/hadolint:0.25.9@sha256:430e949e6554d56ffc2dd08898ee609c71822d7fa1033f7c4dc240e90f2aac23
|
|
commands:
|
|
- hadolint Dockerfile
|
|
when:
|
|
event:
|
|
exclude:
|
|
- tag
|
|
|
|
shellcheck:
|
|
image: koalaman/shellcheck-alpine:stable@sha256:f73b035c8ebfc8a66ba54e07af5cc41e790cf41fff45317914b1ce677dd9cada
|
|
commands:
|
|
- "find . -name *.sh -exec shellcheck -x {} +"
|
|
when:
|
|
event:
|
|
exclude:
|
|
- tag
|