Commit graph

116 commits

Author SHA1 Message Date
8ec7178dd3 ci: shellcheck, set tag instead of latest 2024-02-02 22:09:47 +01:00
88c488106f ci: replace docker-plugin, set SemVer, remove tag 2024-02-02 22:02:00 +01:00
e25ad9470c chore(deps): update zricethezav/gitleaks docker tag to v8.18.2 (#14)
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-02-01 21:46:49 +01:00
5c6a06ba6c ci: add shellcheck 2024-01-29 12:21:03 +01:00
c26c79bcdf chore(deps): update pipelinecomponents/hadolint docker tag to v0.26.0 (#12)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint) | minor | `0.25.9` -> `0.26.0` |

---

### Release Notes

<details>
<summary>pipeline-components/hadolint (pipelinecomponents/hadolint)</summary>

### [`v0.26.0`](https://gitlab.com/pipeline-components/hadolint/compare/v0.25.9...v0.26.0)

[Compare Source](https://gitlab.com/pipeline-components/hadolint/compare/v0.25.9...v0.26.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #12
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:35:50 +01:00
247343453a chore(deps): update pipelinecomponents/hadolint:0.25.9 docker digest to 430e949 (#11)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [pipelinecomponents/hadolint](https://gitlab.com/pipeline-components/hadolint) | digest | `9cef74a` -> `430e949` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #11
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 23:32:22 +01:00
f116aaffae ci: set image for hadolint 2024-01-26 23:28:29 +01:00
1605588186 chore(deps): update zricethezav/gitleaks docker tag to v8.18.1 (#10)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) | patch | `v8.18.0` -> `v8.18.1` |

---

### Release Notes

<details>
<summary>gitleaks/gitleaks (zricethezav/gitleaks)</summary>

### [`v8.18.1`](https://github.com/gitleaks/gitleaks/releases/tag/v8.18.1)

[Compare Source](https://github.com/gitleaks/gitleaks/compare/v8.18.0...v8.18.1)

#### Changelog

-   [`dab7d02`](https://github.com/gitleaks/gitleaks/commit/dab7d02) dont crash on 100gb files pls ([#&#8203;1292](https://github.com/gitleaks/gitleaks/issues/1292))
-   [`e63b657`](https://github.com/gitleaks/gitleaks/commit/e63b657) remove secretgroup from default config ([#&#8203;1288](https://github.com/gitleaks/gitleaks/issues/1288))
-   [`20fcf50`](https://github.com/gitleaks/gitleaks/commit/20fcf50) feat: Hashicorp Terraform fields for password ([#&#8203;1237](https://github.com/gitleaks/gitleaks/issues/1237))
-   [`b496677`](https://github.com/gitleaks/gitleaks/commit/b496677) perf: avoid allocations with `(*regexp.Regexp).MatchString` ([#&#8203;1283](https://github.com/gitleaks/gitleaks/issues/1283))
-   [`a3ab4e8`](https://github.com/gitleaks/gitleaks/commit/a3ab4e8) refactor: more explicit rules ([#&#8203;1280](https://github.com/gitleaks/gitleaks/issues/1280))
-   [`bd9a25a`](https://github.com/gitleaks/gitleaks/commit/bd9a25a) bugfix: reduce false positives for stripe tokens by using word boundaries in regex ([#&#8203;1278](https://github.com/gitleaks/gitleaks/issues/1278))
-   [`6d0d8b5`](https://github.com/gitleaks/gitleaks/commit/6d0d8b5) add Infracost API rule ([#&#8203;1273](https://github.com/gitleaks/gitleaks/issues/1273))
-   [`2959fc0`](https://github.com/gitleaks/gitleaks/commit/2959fc0) refactor: simplify test asserts ([#&#8203;1271](https://github.com/gitleaks/gitleaks/issues/1271))
-   [`d37b38f`](https://github.com/gitleaks/gitleaks/commit/d37b38f) Update Makefile
-   [`14b1ca9`](https://github.com/gitleaks/gitleaks/commit/14b1ca9) refactor: change detect tests to t.Fatal instead of log.Fatal ([#&#8203;1270](https://github.com/gitleaks/gitleaks/issues/1270))
-   [`d9f86d6`](https://github.com/gitleaks/gitleaks/commit/d9f86d6) feat(rules): Add detection for Scalingo API Token ([#&#8203;1262](https://github.com/gitleaks/gitleaks/issues/1262))
-   [`ed34259`](https://github.com/gitleaks/gitleaks/commit/ed34259) feat(jwt): detect base64-encoded tokens ([#&#8203;1256](https://github.com/gitleaks/gitleaks/issues/1256))
-   [`0d5e46f`](https://github.com/gitleaks/gitleaks/commit/0d5e46f) feat: add --ignore-gitleaks-allow cmd flag ([#&#8203;1260](https://github.com/gitleaks/gitleaks/issues/1260))
-   [`a82ac29`](https://github.com/gitleaks/gitleaks/commit/a82ac29) switch out libs ([#&#8203;1259](https://github.com/gitleaks/gitleaks/issues/1259))
-   [`0b84afa`](https://github.com/gitleaks/gitleaks/commit/0b84afa) fix: no-color option should also affect zerolog output ([#&#8203;1242](https://github.com/gitleaks/gitleaks/issues/1242))
-   [`8976539`](https://github.com/gitleaks/gitleaks/commit/8976539) Fixed lineEnd indexing if the match is the whole line ([#&#8203;1223](https://github.com/gitleaks/gitleaks/issues/1223))
-   [`30c6117`](https://github.com/gitleaks/gitleaks/commit/30c6117) feat: Add optional redaction value, default 100 ([#&#8203;1229](https://github.com/gitleaks/gitleaks/issues/1229))
-   [`e9135cf`](https://github.com/gitleaks/gitleaks/commit/e9135cf) fix(jwt): longer segment lengths ([#&#8203;1214](https://github.com/gitleaks/gitleaks/issues/1214))
-   [`f65f915`](https://github.com/gitleaks/gitleaks/commit/f65f915) Added yarn.lock file to default allowlist paths ([#&#8203;1258](https://github.com/gitleaks/gitleaks/issues/1258))
-   [`abfd0f3`](https://github.com/gitleaks/gitleaks/commit/abfd0f3) Update README.md
-   [`18283bb`](https://github.com/gitleaks/gitleaks/commit/18283bb) feat(rules): make case insensitivity optional ([#&#8203;1215](https://github.com/gitleaks/gitleaks/issues/1215))
-   [`9fb36b2`](https://github.com/gitleaks/gitleaks/commit/9fb36b2) feat(rules): detect Hugging Face access tokens ([#&#8203;1204](https://github.com/gitleaks/gitleaks/issues/1204))
-   [`db4bc0f`](https://github.com/gitleaks/gitleaks/commit/db4bc0f) Resolve [#&#8203;1170](https://github.com/gitleaks/gitleaks/issues/1170) - Enable selection of a single rule  ([#&#8203;1183](https://github.com/gitleaks/gitleaks/issues/1183))
-   [`3cbcda2`](https://github.com/gitleaks/gitleaks/commit/3cbcda2) Update authress.go to include alternate form account dash (-) ([#&#8203;1224](https://github.com/gitleaks/gitleaks/issues/1224))
-   [`46c6272`](https://github.com/gitleaks/gitleaks/commit/46c6272) refactor: remove unnecessary removing temp files in tests ([#&#8203;1255](https://github.com/gitleaks/gitleaks/issues/1255))
-   [`963a697`](https://github.com/gitleaks/gitleaks/commit/963a697) refactor: use os.ReadFile instead of os.Open + io.ReadAll ([#&#8203;1254](https://github.com/gitleaks/gitleaks/issues/1254))
-   [`163ec21`](https://github.com/gitleaks/gitleaks/commit/163ec21) fix(sumologic): improve patterns ([#&#8203;1218](https://github.com/gitleaks/gitleaks/issues/1218))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #10
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 22:59:00 +01:00
2f8c002f77 ci: set tag for gitleaks 2024-01-26 22:52:16 +01:00
12aca9e18e chore(deps): pin dependencies (#8)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| alpine | final | pinDigest |  -> `9f867dc` |
| hadolint/hadolint |  | pinDigest |  -> `9cef74a` |
| koalaman/shellcheck-alpine |  | pinDigest |  -> `f73b035` |
| plugins/docker |  | pinDigest |  -> `2f15740` |
| zricethezav/gitleaks |  | pinDigest |  -> `6945c62` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTIuMSIsInVwZGF0ZWRJblZlciI6IjM3LjE1Mi4xIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=-->

Reviewed-on: #8
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-26 16:20:43 +01:00
86d3fafc50 ci: fix woodpecker warnings 2024-01-24 20:00:42 +01:00
6918842303 chore(deps): update dependency flask to v3 2024-01-22 20:47:47 +00:00
d3c4cc91a9 test with old version 2024-01-22 21:47:15 +01:00
5be74d414a set python-packages versions explicit 2024-01-22 21:43:15 +01:00
0504877ebf remove linter ignore 2024-01-22 21:40:53 +01:00
mg
9796ed488b revert 47a7e6e3d2
revert set alpine packages versions explicit
2024-01-22 21:40:33 +01:00
47a7e6e3d2 set alpine packages versions explicit 2024-01-22 21:37:22 +01:00
e9e7b2dd60 chore(deps): update alpine docker tag to v20231219 2024-01-22 20:34:48 +00:00
8348fa7134 Configure Renovate (#4)
Welcome to [Renovate](https://github.com/renovatebot/renovate)! This is an onboarding PR to help you understand and configure settings before regular Pull Requests begin.

🚦 To activate Renovate, merge this Pull Request. To disable Renovate, simply close this Pull Request unmerged.

---
### Detected Package Files

 * `Dockerfile` (dockerfile)
 * `requirements.txt` (pip_requirements)

### What to Expect

With your current configuration, Renovate will create 1 Pull Request:

<details>
<summary>chore(deps): update alpine docker tag to v20231219</summary>

  - Schedule: ["at any time"]
  - Branch name: `renovate/alpine-20231219-x`
  - Merge into: `master`
  - Upgrade alpine to `20231219`

</details>

---

 Got questions? Check out Renovate's [Docs](https://docs.renovatebot.com/), particularly the Getting Started section.
If you need any further assistance then you can also [request help here](https://github.com/renovatebot/renovate/discussions).

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

Reviewed-on: #4
Co-authored-by: Renovate Bot <renovate@mgrote.net>
Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-01-22 21:34:05 +01:00
23e828c481 ci: fix? 2024-01-11 10:05:01 +01:00
f50b01e3ce Domainumstellung: grote.lan -> mgrote.net 2023-11-25 17:45:52 +01:00
05aaf3960c ci: ignore tests.sh 2023-11-09 09:21:48 +01:00
c9cd4a913d ci: enable shellcheck 2023-11-09 09:20:42 +01:00
15eec18863 FROM alpine:3 2023-11-08 16:27:34 +01:00
b31d4279f2 fix package name 2023-11-08 16:21:50 +01:00
408ed58199 ci: disable shellcheck 2023-11-08 16:20:39 +01:00
017fef9b52 move to alpine 2023-11-08 16:20:13 +01:00
d573f0af84 add badge 2023-11-08 13:24:02 +01:00
070e57fed7 ci: add shellcheck 2023-11-03 19:32:18 +01:00
5ee4473e77 drone -> woodpecker 2023-11-03 19:26:10 +01:00
e27473ead4 remove explicit set versions
Signed-off-by: Michael Grote <michael.grote@posteo.de>
2023-10-03 18:07:58 +02:00
e6dceb6ddc set Werktzeug Version explicit (https://stackoverflow.com/questions/77213053/importerror-cannot-import-name-url-quote-from-werkzeug-urls)
Signed-off-by: Michael Grote <michael.grote@posteo.de>
2023-10-03 18:03:18 +02:00
ae6275331e ci: remove push to dockerhub 2023-08-22 09:55:30 +02:00
6e1c0d79dd ci: remove tests 2023-07-22 08:59:56 +02:00
d5f022fd1e ci: test url 2023-07-04 13:27:14 +02:00
ce52548d69 ci: echo 2023-06-26 23:59:49 +02:00
9f82084cc2 ci: add gunicorn call 2023-06-26 23:58:45 +02:00
7c3f608839 ci: apt -y 2023-06-26 23:54:49 +02:00
7428e1a21f ci: set DEBIAN_FRONTEND: noninteractive for tests 2023-06-26 23:52:00 +02:00
f4919dca39 ci: fix tests 2023-06-26 23:48:45 +02:00
c6435f879b ci: syntax 2023-06-26 23:44:40 +02:00
51f3a12f52 ci: syntax 2023-06-26 23:44:16 +02:00
7300cbaeea ci: syntax 2023-06-26 23:43:13 +02:00
310a6540b6 ci: add tests 2023-06-26 23:42:28 +02:00
07826d05c4 ci: remove http_proxy/apt-cacher-ng 2023-06-11 21:16:48 +02:00
e2f2f49a13 ci: typo 2023-06-10 11:14:17 +02:00
8262d4de49 ci: add parallelism 2023-06-10 11:13:39 +02:00
mg
b1acba27b6 revert 4f6176fcb5
revert ci: test proxy with fqdn
2023-04-28 21:56:38 +02:00
4f6176fcb5 ci: test proxy with fqdn 2023-04-28 21:51:49 +02:00
bfb4f42353 ci: add proxy 2023-04-28 21:45:36 +02:00