routeros-config-export/.woodpecker/lint.yml

30 lines
1.1 KiB
YAML
Raw Normal View History

2023-11-03 19:28:37 +01:00
---
steps:
gitleaks:
chore(deps): update zricethezav/gitleaks docker tag to v8.18.2 (#7) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [zricethezav/gitleaks](https://github.com/gitleaks/gitleaks) | patch | `v8.18.1` -> `v8.18.2` | --- ### Release Notes <details> <summary>gitleaks/gitleaks (zricethezav/gitleaks)</summary> ### [`v8.18.2`](https://github.com/gitleaks/gitleaks/releases/tag/v8.18.2) [Compare Source](https://github.com/gitleaks/gitleaks/compare/v8.18.1...v8.18.2) #### Changelog - [`ac4b514`](https://github.com/gitleaks/gitleaks/commit/ac4b514) removed gitleaks user from Dockerfile ([#&#8203;1313](https://github.com/gitleaks/gitleaks/issues/1313)) - [`76c9e31`](https://github.com/gitleaks/gitleaks/commit/76c9e31) Remove IAM identifiers for non-credential resources in the aws-access-token rule ([#&#8203;1307](https://github.com/gitleaks/gitleaks/issues/1307)) - [`afe046b`](https://github.com/gitleaks/gitleaks/commit/afe046b) Update stripe rule to not alert on publishable keys ([#&#8203;1320](https://github.com/gitleaks/gitleaks/issues/1320)) - [`8b8920d`](https://github.com/gitleaks/gitleaks/commit/8b8920d) --max-target-megabytes flag now supported for --no-git flag as well ([#&#8203;1330](https://github.com/gitleaks/gitleaks/issues/1330)) - [`a59289c`](https://github.com/gitleaks/gitleaks/commit/a59289c) add pre-commit hook gitleaks-system ([#&#8203;1225](https://github.com/gitleaks/gitleaks/issues/1225)) - [`870194b`](https://github.com/gitleaks/gitleaks/commit/870194b) fix errors when using protect and an external git diff tool ([#&#8203;1318](https://github.com/gitleaks/gitleaks/issues/1318)) - [`179c607`](https://github.com/gitleaks/gitleaks/commit/179c607) rename filesystem to directory ([#&#8203;1317](https://github.com/gitleaks/gitleaks/issues/1317)) - [`8de8938`](https://github.com/gitleaks/gitleaks/commit/8de8938) Enhance Secret Descriptions ([#&#8203;1300](https://github.com/gitleaks/gitleaks/issues/1300)) - [`ca7aa14`](https://github.com/gitleaks/gitleaks/commit/ca7aa14) Small refactor `detect` and `sources` ([#&#8203;1297](https://github.com/gitleaks/gitleaks/issues/1297)) - [`01e60c8`](https://github.com/gitleaks/gitleaks/commit/01e60c8) chore(config): refactor to go generate; simplify configRules init ([#&#8203;1295](https://github.com/gitleaks/gitleaks/issues/1295)) - [`54f5f04`](https://github.com/gitleaks/gitleaks/commit/54f5f04) forgot symlinks - [`221d5c4`](https://github.com/gitleaks/gitleaks/commit/221d5c4) pretty apparent 'protect' and 'detect' should be merged into one command ([#&#8203;1294](https://github.com/gitleaks/gitleaks/issues/1294)) - [`128b50f`](https://github.com/gitleaks/gitleaks/commit/128b50f) style: sort the stopwords ([#&#8203;1289](https://github.com/gitleaks/gitleaks/issues/1289)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNjUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjE2NS4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIn0=--> Reviewed-on: https://git.mgrote.net/mg/routeros-config-export/pulls/7 Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
2024-02-01 21:51:20 +01:00
image: zricethezav/gitleaks:v8.18.2@sha256:eadfe256fa18d6a78a717abc9ed454c8e03865d1c46d627bca83977f4424901a
2023-11-03 19:28:37 +01:00
commands:
- gitleaks detect --no-git --verbose --source $CI_WORKSPACE
when:
2024-02-06 20:15:16 +01:00
- evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
2023-11-03 19:28:37 +01:00
hadolint:
image: pipelinecomponents/hadolint:0.26.0@sha256:7122937006c7a9bcbb78ce764d3c2f0092f183b843ad128bc9fd6ea918e22d5b
2023-11-03 19:28:37 +01:00
commands:
- hadolint Dockerfile
when:
2024-02-06 20:15:16 +01:00
- evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
2023-11-03 19:28:37 +01:00
shellcheck:
image: "koalaman/shellcheck-alpine:latest@sha256:eed99e46acb69ede0f68db4fd8f1b3b00cc09d66cb7d4d6f1f6296bd8833932d"
2023-11-03 19:28:37 +01:00
commands:
2024-02-02 22:40:52 +01:00
- |
find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do
if echo "$line" | grep -q "shell script"; then
file_path=$(echo "$line" | awk -F':' '{print $1}')
shellcheck "$file_path"
fi
done
2024-02-06 20:15:16 +01:00
when:
- evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
2024-02-02 22:40:52 +01:00
...