feat(sec): add sec label and allow automerge (#66 )

Reviewed-on: #66 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
feat(sec): enable vulnerability alerts (#64 )
2026-06-20 21:02:06 +02:00 · 2026-06-20 20:18:36 +02:00 · 2026-06-20 19:26:31 +02:00
3 changed files with 45 additions and 2 deletions
@@ -20,6 +20,6 @@ jobs:
        with:
          token: ${{ secrets.GITEA_TOKEN }}
          prerelease: ${{ github.event_name == 'workflow_dispatch' }}
-      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@d658186b7db91d5a93dec78794c8585fa98af79c # 0.2.6
+      - uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@38c1bbd8bad3e7965744d03de85faa4a5b808d1b # 0.2.4
        with:
          tag: ${{ steps.tag.outputs.new-tag }}
@@ -5,6 +5,40 @@
    {
      "matchManagers": ["github-actions"],
      "addLabels": ["deps", "action"]
+    },
+    {
+      "matchManagers": ["github-actions"],
+      "matchUpdateTypes": ["minor", "patch"],
+      "matchPackageNames": [
+        "https://gitea.t000-n.de/t.behrendt/actions/*",
+        "https://gitea.t000-n.de/t.behrendt/conventional-semantic-git-tag-increment",
+        "https://gitea.t000-n.de/t.behrendt/k_deploy_workflows",
+        "https://gitea.t000-n.de/t.behrendt/validate-json-by-json-schema-action",
+        
+        "actions/checkout",
+        "actions/cache",
+        "actions/cache/*",
+        "actions/setup-go",
+
+        "azure/setup-kubectl",
+        "azure/setup-helm",
+        "azure/k8s-set-context",
+        "azure/k8s-create-secret",
+        "azure/k8s-deploy",
+        "azure/k8s-lint",
+        
+        "helmfile/helmfile-action",
+
+        "docker/setup-buildx-action",
+        "docker/login-action",
+        "docker/build-push-action",
+
+        "oven-sh/setup-bun"
+      ],
+      "automerge": true,
+      "platformAutomerge": true,
+      "automergeType": "pr",
+      "addLabels": ["automerge"]
    }
  ]
 }
@@ -17,5 +17,14 @@
      "minimumReleaseAge": "0 days",
      "internalChecksFilter": "none"
    }
-  ]
+  ],
+  "osvVulnerabilityAlerts": true,
+  "vulnerabilityAlerts": {
+    "enabled": true,
+    "automerge": true,
+    "platformAutomerge": true,
+    "automergeType": "pr",
+    "addLabels": ["automerge", "security"],
+    "vulnerabilityFixStrategy": "lowest"
+  }
 }
Author	SHA1	Message	Date
t.behrendt	444178a987	feat(sec): add sec label and allow automerge (#66 ) CD / Release (push) Successful in 6s Details Reviewed-on: #66 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 21:02:06 +02:00
t.behrendt	18683271ea	feat(sec): enable vulnerability alerts (#64 ) CD / Release (push) Successful in 28s Details Reviewed-on: #64 Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 20:18:36 +02:00
t.behrendt	b4939f348d	feat(actions): allow automerge of certain actions (#63 ) CD / Release (push) Successful in 6s Details Reviewed-on: #63 Reviewed-by: branch-buddy <branch-buddy@t00n.de> Co-authored-by: Timo Behrendt <t.behrendt@t00n.de> Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>	2026-06-20 19:26:31 +02:00