t.behrendt/sec-actions
0
0
Fork 0
Code Issues 2 Pull Requests Actions Activity

Compare commits

base: t.behrendt/sec-actions:9a7963bbb88e1d5318657c68b6ee3799e3819504
Branches Tags
t.behrendt/sec-actions:main t.behrendt/sec-actions:chore-remove-setup-trivy-action
t.behrendt/sec-actions:1.0.8 t.behrendt/sec-actions:1.0.7 t.behrendt/sec-actions:1.0.6 t.behrendt/sec-actions:1.0.5 t.behrendt/sec-actions:1.0.4 t.behrendt/sec-actions:1.0.3 t.behrendt/sec-actions:1.0.2 t.behrendt/sec-actions:1.0.1 t.behrendt/sec-actions:1.0.0 t.behrendt/sec-actions:0.0.10 t.behrendt/sec-actions:0.0.9 t.behrendt/sec-actions:0.0.8 t.behrendt/sec-actions:0.0.7 t.behrendt/sec-actions:0.0.6 t.behrendt/sec-actions:0.0.5 t.behrendt/sec-actions:0.0.4 t.behrendt/sec-actions:0.0.3 t.behrendt/sec-actions:0.0.2 t.behrendt/sec-actions:0.0.1
..
compare: t.behrendt/sec-actions:0.0.2
Branches Tags
t.behrendt/sec-actions:main t.behrendt/sec-actions:chore-remove-setup-trivy-action
t.behrendt/sec-actions:1.0.8 t.behrendt/sec-actions:1.0.7 t.behrendt/sec-actions:1.0.6 t.behrendt/sec-actions:1.0.5 t.behrendt/sec-actions:1.0.4 t.behrendt/sec-actions:1.0.3 t.behrendt/sec-actions:1.0.2 t.behrendt/sec-actions:1.0.1 t.behrendt/sec-actions:1.0.0 t.behrendt/sec-actions:0.0.10 t.behrendt/sec-actions:0.0.9 t.behrendt/sec-actions:0.0.8 t.behrendt/sec-actions:0.0.7 t.behrendt/sec-actions:0.0.6 t.behrendt/sec-actions:0.0.5 t.behrendt/sec-actions:0.0.4 t.behrendt/sec-actions:0.0.3 t.behrendt/sec-actions:0.0.2 t.behrendt/sec-actions:0.0.1

3 Commits
9a7963bbb8 .. 0.0.2

Author SHA1 Message Date
t.behrendt 2616391b42 Revert "refactor(setup-db): to run trivy in docker (#54)" (#56)
CD / Release (push) Successful in 5s
Details 
This reverts commit 81eda53a59.

Reviewed-on: #56
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
 2026-04-10 19:36:38 +02:00
t.behrendt 81eda53a59 refactor(setup-db): to run trivy in docker (#54)
CD / Release (push) Successful in 4s
Details 
As part of our safety initiative, I'm refactoring setup-db to run trivy inside a Docker container with minimal privileges, reducing leakage of secrets, files, etc. to a minimum in case the dependency gets compromised.
Additionally, we are always pinning the trivy docker image to a fixed digest. Renovate has been configured to keep the Trivy image version up-to-date.

Reviewed-on: #54
Reviewed-by: branch-buddy <branch-buddy@t00n.de>
Co-authored-by: Timo Behrendt <t.behrendt@t00n.de>
Co-committed-by: Timo Behrendt <t.behrendt@t00n.de>
 2026-04-10 18:43:03 +02:00
renovate-bot a9ff551b88 chore(deps): update https://gitea.t000-n.de/t.behrendt/actions action to v0.2.1 (#49)
CD / Release (push) Successful in 1m14s
Details 
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [https://gitea.t000-n.de/t.behrendt/actions](https://gitea.t000-n.de/t.behrendt/actions) | action | minor | `0.1.5` → `0.2.1` |

---

> ⚠️ **Warning**
>
> Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>t.behrendt/actions (https://gitea.t000-n.de/t.behrendt/actions)</summary>

### [`v0.2.1`](https://gitea.t000-n.de/t.behrendt/actions/compare/0.2.0...0.2.1)

[Compare Source](https://gitea.t000-n.de/t.behrendt/actions/compare/0.2.0...0.2.1)

### [`v0.2.0`](https://gitea.t000-n.de/t.behrendt/actions/compare/0.1.7...0.2.0)

[Compare Source](https://gitea.t000-n.de/t.behrendt/actions/compare/0.1.7...0.2.0)

### [`v0.1.7`](https://gitea.t000-n.de/t.behrendt/actions/compare/0.1.6...0.1.7)

[Compare Source](https://gitea.t000-n.de/t.behrendt/actions/compare/0.1.6...0.1.7)

### [`v0.1.6`](https://gitea.t000-n.de/t.behrendt/actions/compare/0.1.5...0.1.6)

[Compare Source](https://gitea.t000-n.de/t.behrendt/actions/compare/0.1.5...0.1.6)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41LjQiLCJ1cGRhdGVkSW5WZXIiOiI0My41LjQiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbImFjdGlvbiIsImRlcHMiXX0=-->

Reviewed-on: t.behrendt/trivy-actions#49
Reviewed-by: t.behrendt <t.behrendt@noreply.localhost>
Co-authored-by: Renovate Bot <renovate@t00n.de>
Co-committed-by: Renovate Bot <renovate@t00n.de>
 2026-03-15 21:52:37 +01:00
2 changed files with 2 additions and 2 deletions
Expand all files Collapse all files
.gitea/workflows/cd.yaml
+1 -1
View File
@@ -19,6 +19,6 @@ jobs:
with: with:
token: ${{ secrets.GITEA_TOKEN }} token: ${{ secrets.GITEA_TOKEN }}
- name: Push tag - name: Push tag
uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@8a4003819da775535e2a7f456d812da656926aeb # 0.1.7 uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@3925c92fc33f3d2bc87d28d21ab691b7e6dd6cdf # 0.2.1
with: with:
tag: ${{ steps.tag.outputs.new-tag }} tag: ${{ steps.tag.outputs.new-tag }}
.gitea/workflows/prerelease.yaml
+1 -1
View File
@@ -18,6 +18,6 @@ jobs:
token: ${{ secrets.GITEA_TOKEN }} token: ${{ secrets.GITEA_TOKEN }}
prerelease: true prerelease: true
- name: Push tag - name: Push tag
uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@8a4003819da775535e2a7f456d812da656926aeb # 0.1.7 uses: https://gitea.t000-n.de/t.behrendt/actions/release-git-tag@3925c92fc33f3d2bc87d28d21ab691b7e6dd6cdf # 0.2.1
with: with:
tag: ${{ steps.tag.outputs.new-tag }} tag: ${{ steps.tag.outputs.new-tag }}