Compare commits
5 Commits
feature/up
...
renovate/a
| Author | SHA1 | Date | |
|---|---|---|---|
| 728bae9120 | |||
|
2ae472fd70
|
|||
|
bff92f363b
|
|||
|
5eefad3bfc
|
|||
|
fcc9ac5d86
|
@@ -21,7 +21,7 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Set up QEMU
|
- name: Set up QEMU
|
||||||
uses: docker/setup-qemu-action@v3
|
uses: docker/setup-qemu-action@v3
|
||||||
- name: Set up Docker Buildx
|
- name: Set up Docker Buildx
|
||||||
|
|||||||
@@ -1,7 +1,13 @@
|
|||||||
name: Cog Check
|
---
|
||||||
|
name: Cog check
|
||||||
on:
|
on:
|
||||||
pull_request:
|
pull_request:
|
||||||
workflow_call:
|
workflow_call:
|
||||||
|
# inputs:
|
||||||
|
# check-latest-tag-only:
|
||||||
|
# type: boolean
|
||||||
|
# required: false
|
||||||
|
# default: true
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
release:
|
release:
|
||||||
@@ -9,13 +15,14 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
|
||||||
- name: Semver release
|
- name: Semver release
|
||||||
uses: cocogitto/cocogitto-action@v3
|
uses: cocogitto/cocogitto-action@v3
|
||||||
with:
|
with:
|
||||||
|
# check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
|
||||||
check-latest-tag-only: true
|
check-latest-tag-only: true
|
||||||
git-user: "gitea-bot"
|
git-user: "gitea-bot"
|
||||||
git-user-email: "bot@git.palkoi.net"
|
git-user-email: "bot@git.palkoi.net"
|
||||||
|
|||||||
@@ -1,9 +1,15 @@
|
|||||||
name: Cog Release
|
---
|
||||||
|
name: Cog release
|
||||||
on:
|
on:
|
||||||
push:
|
push:
|
||||||
branches:
|
branches:
|
||||||
- main
|
- main
|
||||||
workflow_call:
|
workflow_call:
|
||||||
|
# inputs:
|
||||||
|
# check-latest-tag-only:
|
||||||
|
# type: boolean
|
||||||
|
# required: false
|
||||||
|
# default: true
|
||||||
|
|
||||||
jobs:
|
jobs:
|
||||||
release:
|
release:
|
||||||
@@ -11,7 +17,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
|
||||||
@@ -28,6 +34,8 @@ jobs:
|
|||||||
release: true
|
release: true
|
||||||
git-user: "gitea-bot"
|
git-user: "gitea-bot"
|
||||||
git-user-email: "bot@git.palkoi.net"
|
git-user-email: "bot@git.palkoi.net"
|
||||||
|
check-latest-tag-only: true
|
||||||
|
# check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
|
||||||
|
|
||||||
- name: Generate Changelog
|
- name: Generate Changelog
|
||||||
run: cog changelog --at ${{ steps.release.outputs.version }} -t full_hash > GITHUB_CHANGELOG.md
|
run: cog changelog --at ${{ steps.release.outputs.version }} -t full_hash > GITHUB_CHANGELOG.md
|
||||||
|
|||||||
@@ -27,7 +27,7 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Clone repo
|
- name: Clone repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Retrieve artifacts
|
- name: Retrieve artifacts
|
||||||
id: download
|
id: download
|
||||||
uses: actions/download-artifact@v3
|
uses: actions/download-artifact@v3
|
||||||
@@ -42,7 +42,7 @@ jobs:
|
|||||||
exit "$(cat exitcode)";
|
exit "$(cat exitcode)";
|
||||||
fi
|
fi
|
||||||
- name: Clone blackbox repo
|
- name: Clone blackbox repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
if: ${{ steps.check.outputs.code == 2 }}
|
if: ${{ steps.check.outputs.code == 2 }}
|
||||||
with:
|
with:
|
||||||
repository: xaked/blackbox
|
repository: xaked/blackbox
|
||||||
|
|||||||
@@ -31,9 +31,9 @@ jobs:
|
|||||||
tofu_version: ${{ inputs.tofu-version }}
|
tofu_version: ${{ inputs.tofu-version }}
|
||||||
cli_config_credentials_token: ${{ secrets.tf-api-token }}
|
cli_config_credentials_token: ${{ secrets.tf-api-token }}
|
||||||
- name: Clone repo
|
- name: Clone repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Clone blackbox repo
|
- name: Clone blackbox repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
repository: xaked/blackbox
|
repository: xaked/blackbox
|
||||||
path: blackbox
|
path: blackbox
|
||||||
|
|||||||
@@ -13,7 +13,7 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Clone blackbox repo
|
- name: Clone blackbox repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
repository: xaked/blackbox
|
repository: xaked/blackbox
|
||||||
path: blackbox
|
path: blackbox
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Clone repo
|
- name: Clone repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Run Trivy vulnerability scanner in IaC mode (LOW/MED)
|
- name: Run Trivy vulnerability scanner in IaC mode (LOW/MED)
|
||||||
uses: aquasecurity/trivy-action@master
|
uses: aquasecurity/trivy-action@master
|
||||||
with:
|
with:
|
||||||
|
|||||||
@@ -43,7 +43,7 @@ jobs:
|
|||||||
steps:
|
steps:
|
||||||
# Git Checkout
|
# Git Checkout
|
||||||
- name: Checkout Code
|
- name: Checkout Code
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
token: ${{ secrets.gitea-token }}
|
token: ${{ secrets.gitea-token }}
|
||||||
fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
|
fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
|
||||||
|
|||||||
@@ -22,7 +22,7 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Clone repo
|
- name: Clone repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Retrieve artifacts
|
- name: Retrieve artifacts
|
||||||
id: download
|
id: download
|
||||||
uses: actions/download-artifact@v3
|
uses: actions/download-artifact@v3
|
||||||
@@ -37,7 +37,7 @@ jobs:
|
|||||||
exit "$(cat exitcode)";
|
exit "$(cat exitcode)";
|
||||||
fi
|
fi
|
||||||
- name: Clone blackbox repo
|
- name: Clone blackbox repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
if: ${{ steps.check.outputs.code == 2 }}
|
if: ${{ steps.check.outputs.code == 2 }}
|
||||||
with:
|
with:
|
||||||
repository: xaked/blackbox
|
repository: xaked/blackbox
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
ref: ${{ github.event.pull_request.head.ref }}
|
ref: ${{ github.event.pull_request.head.ref }}
|
||||||
- name: Install terraform docs
|
- name: Install terraform docs
|
||||||
|
|||||||
@@ -26,9 +26,9 @@ jobs:
|
|||||||
terraform_version: 1.7.5
|
terraform_version: 1.7.5
|
||||||
cli_config_credentials_token: ${{ secrets.tf-api-token }}
|
cli_config_credentials_token: ${{ secrets.tf-api-token }}
|
||||||
- name: Clone repo
|
- name: Clone repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Clone blackbox repo
|
- name: Clone blackbox repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
repository: xaked/blackbox
|
repository: xaked/blackbox
|
||||||
path: blackbox
|
path: blackbox
|
||||||
|
|||||||
24
cog.toml
24
cog.toml
@@ -1,12 +1,12 @@
|
|||||||
[packages]
|
# [packages]
|
||||||
build-docker-image = { path = ".gitea/workflows/build-docker-image" }
|
# build-docker-image = { path = ".gitea/workflows/build-docker-image.yml" }
|
||||||
cog-check = { path = ".gitea/workflows/cog-check.yml" }
|
# cog-check = { path = ".gitea/workflows/cog-check.yml" }
|
||||||
cog-release = { path = ".gitea/workflows/cog-release.yml" }
|
# cog-release = { path = ".gitea/workflows/cog-release.yml" }
|
||||||
otf-apply = { path = ".gitea/workflows/otf-apply.yml" }
|
# otf-apply = { path = ".gitea/workflows/otf-apply.yml" }
|
||||||
otf-plan = { path = ".gitea/workflows/otf-plan.yml" }
|
# otf-plan = { path = ".gitea/workflows/otf-plan.yml" }
|
||||||
sec-blackbox-decrypt = { path = ".gitea/workflows/sec-blackbox-decrypt.yml" }
|
# sec-blackbox-decrypt = { path = ".gitea/workflows/sec-blackbox-decrypt.yml" }
|
||||||
sec-checks-trivy = { path = ".gitea/workflows/sec-checks-trivy.yml" }
|
# sec-checks-trivy = { path = ".gitea/workflows/sec-checks-trivy.yml" }
|
||||||
sec-megalinter = { path = ".gitea/workflows/sec-megalinter.yml" }
|
# sec-megalinter = { path = ".gitea/workflows/sec-megalinter.yml" }
|
||||||
tf-apply = { path = ".gitea/workflows/tf-apply.yml" }
|
# tf-apply = { path = ".gitea/workflows/tf-apply.yml" }
|
||||||
tf-docs = { path = ".gitea/workflows/tf-docs.yml" }
|
# tf-docs = { path = ".gitea/workflows/tf-docs.yml" }
|
||||||
tf-plan = { path = ".gitea/workflows/tf-plan.yml" }
|
# tf-plan = { path = ".gitea/workflows/tf-plan.yml" }
|
||||||
|
|||||||
Reference in New Issue
Block a user