.ansible-lint

@@ -23,3 +23,4 @@ exclude_paths:
   - roles/ansible-ufw
   - roles/ansible_role_gitea
   - roles/ansible-role-postgresql
+  - .woodpecker/

.woodpecker/ansible-lint.yml

@@ -13,6 +13,6 @@ steps:
     # https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands
     secrets: [vaultpass]
     when:
-      - event: [push, pull_request, cron]
+      - event: [push, pull_request, cron, pull_request_closed, tag, release, manual]
         evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
 ...

.woodpecker/ansible-playbook.yml

@@ -0,0 +1,18 @@
+---
+depends_on:
+  - ansible-lint
+
+steps:
+  ansible-playbook:
+    image: quay.io/ansible/creator-ee:v24.2.0
+    commands:
+      - ansible-lint --version
+      - echo $${VAULTPASS} > ./vault-pass.yml # nach des Secret in Großschreibung
+      - ansible-galaxy install -r requirements.yaml
+      - echo RUUUUUN! #ansible-playbook playbooks/2_all.yml playbooks/3_service/* --limit production
+    # https://woodpecker-ci.org/docs/usage/secrets#use-secrets-in-commands
+    secrets: [vaultpass]
+    when:
+      - event: [push, pull_request_closed]
+        branch: master
+...

.woodpecker/gitleaks.yml

@@ -5,6 +5,6 @@ steps:
     commands:
       - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
     when:
-      - event: [push, pull_request, cron]
+      - event: [push, pull_request, cron, pull_request_closed, tag, release, manual]
         evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
 ...