feat: harden setup-db action

2026-04-10 18:02:08 +02:00
parent a9ff551b88
commit efef29591b
3 changed files with 42 additions and 5 deletions
@@ -4,6 +4,17 @@
    "local>t.behrendt/renovate-configs:common",
    "local>t.behrendt/renovate-configs:action"
  ],
+  "customManagers": [
+    {
+      "customType": "regex",
+      "description": "Update Trivy docker image",
+      "managerFilePatterns": ["/(^|/)setup-db/action\\.ya?ml$/"],
+      "datasourceTemplate": "docker",
+      "matchStrings": [
+        "default:\\s*\"(?<depName>ghcr\\.io/aquasecurity/trivy):(?<currentValue>[\\d\\.]+)(?:@(?<currentDigest>sha256:[a-f0-9]+))?\""
+      ]
+    }
+  ],
  "packageRules": [
    {
      "matchManagers": ["dockerfile", "kubernetes", "helmfile", "helm-values"],