feat(sec): add vulnerabilities to dashboard (#67 )

Reviewed-on: #67 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
feat(sec): add sec label and allow automerge (#66 )
2026-06-20 21:22:00 +02:00 · 2026-06-20 21:02:06 +02:00 · 2026-06-20 20:18:36 +02:00 · 2026-06-20 19:26:31 +02:00 · 2026-06-13 12:10:36 +02:00
4 changed files with 47 additions and 3 deletions
@@ -11,7 +11,7 @@ jobs:
    name: Release
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
        with:
          fetch-depth: 0
      - name: Increment tag
@@ -17,7 +17,7 @@ jobs:
          - "docker-compose.json"
          - "bun-npm.json"
    steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
      - name: Validate "${{ matrix.json-file }}"
        uses: https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action@6bf2c1355ac4430a6fb77befd36fb95243fcaa3a # 0.1.12
        with:
@@ -5,6 +5,40 @@
    {
      "matchManagers": ["github-actions"],
      "addLabels": ["deps", "action"]
    },
    {
      "matchManagers": ["github-actions"],
      "matchUpdateTypes": ["minor", "patch"],
      "matchPackageNames": [
        "https://gitea.t000-n.de/t.behrendt/actions/*",
        "https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment",
        "https://gitea.t000-n.de/t.behrendt/k_deploy_workflows",
        "https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action",
        "actions/checkout",
        "actions/cache",
        "actions/cache/*",
        "actions/setup-go",
        "azure/setup-kubectl",
        "azure/setup-helm",
        "azure/k8s-set-context",
        "azure/k8s-create-secret",
        "azure/k8s-deploy",
        "azure/k8s-lint",
        "helmfile/helmfile-action",
        "docker/setup-buildx-action",
        "docker/login-action",
        "docker/build-push-action",
        "oven-sh/setup-bun"
      ],
      "automerge": true,
      "platformAutomerge": true,
      "automergeType": "pr",
      "addLabels": ["automerge"]
    }
  ]
 }
@@ -17,5 +17,15 @@
      "minimumReleaseAge": "0 days",
      "internalChecksFilter": "none"
    }
-  ]
+  ],
  "osvVulnerabilityAlerts": true,
  "dependencyDashboardOSVVulnerabilitySummary": "all",
  "vulnerabilityAlerts": {
    "enabled": true,
    "automerge": true,
    "platformAutomerge": true,
    "automergeType": "pr",
    "addLabels": ["automerge", "security"],
    "vulnerabilityFixStrategy": "lowest"
  }
 }
Author	SHA1	Message	Date
t.behrendt	f8788986cb	feat(sec): add vulnerabilities to dashboard (#67 ) CD / Release (push) Successful in 28s Details Reviewed-on: #67 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 21:22:00 +02:00
t.behrendt	444178a987	feat(sec): add sec label and allow automerge (#66 ) CD / Release (push) Successful in 6s Details Reviewed-on: #66 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 21:02:06 +02:00
t.behrendt	18683271ea	feat(sec): enable vulnerability alerts (#64 ) CD / Release (push) Successful in 28s Details Reviewed-on: #64 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 20:18:36 +02:00
t.behrendt	b4939f348d	feat(actions): allow automerge of certain actions (#63 ) CD / Release (push) Successful in 6s Details Reviewed-on: #63 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 19:26:31 +02:00
renovate-bot	57c07b187f	chore(deps): update actions/checkout action to v6.0.3 (#60 ) CD / Release (push) Successful in 5s Details This PR contains the following updates: \| Package \| Type \| Update \| Change \| \|---\|---\|---\|---\| \| [actions/checkout](https://github.com/actions/checkout) \| action \| patch \| `v6.0.2` → `v6.0.3` \| --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v6.0.3`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v603) [Compare Source](https://github.com/actions/checkout/compare/v6.0.2...v6.0.3) - Fix checkout init for SHA-256 repositories by [@yaananth](https://github.com/yaananth) in [#2439](https://github.com/actions/checkout/pull/2439) - fix: expand merge commit SHA regex and add SHA-256 test cases by [@yaananth](https://github.com/yaananth) in [#2414](https://github.com/actions/checkout/pull/2414) </details> --- ### Configuration 📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied. ♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=--> Reviewed-on: #60 Reviewed-by: t.behrendt <2+t.behrendt@noreply.localhost> Co-authored-by: Renovate Bot <renovate@t00n.de> Co-committed-by: Renovate Bot <renovate@t00n.de>	2026-06-13 12:10:36 +02:00