Compare commits
5 Commits
bd11fd2844
...
2.0.1
| Author | SHA1 | Date | |
|---|---|---|---|
| 173c01c9ca | |||
| 39fd0b7054 | |||
| 9104c113dc | |||
| 2ce0f74e27 | |||
| 728bae9120 |
@@ -21,7 +21,7 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Checkout
|
- name: Checkout
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Set up QEMU
|
- name: Set up QEMU
|
||||||
uses: docker/setup-qemu-action@v3
|
uses: docker/setup-qemu-action@v3
|
||||||
- name: Set up Docker Buildx
|
- name: Set up Docker Buildx
|
||||||
|
|||||||
@@ -15,7 +15,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
|
||||||
|
|||||||
@@ -17,7 +17,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
fetch-depth: 0
|
fetch-depth: 0
|
||||||
|
|
||||||
|
|||||||
@@ -27,10 +27,10 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Clone repo
|
- name: Clone repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Retrieve artifacts
|
- name: Retrieve artifacts
|
||||||
id: download
|
id: download
|
||||||
uses: actions/download-artifact@v3
|
uses: actions/download-artifact@v7
|
||||||
with:
|
with:
|
||||||
name: artifacts
|
name: artifacts
|
||||||
- name: Check if job errored
|
- name: Check if job errored
|
||||||
@@ -42,7 +42,7 @@ jobs:
|
|||||||
exit "$(cat exitcode)";
|
exit "$(cat exitcode)";
|
||||||
fi
|
fi
|
||||||
- name: Clone blackbox repo
|
- name: Clone blackbox repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
if: ${{ steps.check.outputs.code == 2 }}
|
if: ${{ steps.check.outputs.code == 2 }}
|
||||||
with:
|
with:
|
||||||
repository: xaked/blackbox
|
repository: xaked/blackbox
|
||||||
@@ -76,7 +76,7 @@ jobs:
|
|||||||
known-hosts: ${{ secrets.ssh-known-hosts }}
|
known-hosts: ${{ secrets.ssh-known-hosts }}
|
||||||
- name: Restore tofu cache
|
- name: Restore tofu cache
|
||||||
if: ${{ steps.check.outputs.code == 2 }}
|
if: ${{ steps.check.outputs.code == 2 }}
|
||||||
uses: actions/cache@v4
|
uses: actions/cache@v5
|
||||||
id: cache-tofu-restore
|
id: cache-tofu-restore
|
||||||
with:
|
with:
|
||||||
path: .terraform
|
path: .terraform
|
||||||
@@ -96,7 +96,7 @@ jobs:
|
|||||||
run: tofu apply -input=false -auto-approve tfplan.binary;
|
run: tofu apply -input=false -auto-approve tfplan.binary;
|
||||||
- name: Save tofu cache
|
- name: Save tofu cache
|
||||||
if: ${{ steps.check.outputs.code == 2 }}
|
if: ${{ steps.check.outputs.code == 2 }}
|
||||||
uses: actions/cache/save@v4
|
uses: actions/cache/save@v5
|
||||||
id: cache-tofu-save
|
id: cache-tofu-save
|
||||||
with:
|
with:
|
||||||
path: .terraform
|
path: .terraform
|
||||||
|
|||||||
@@ -31,9 +31,9 @@ jobs:
|
|||||||
tofu_version: ${{ inputs.tofu-version }}
|
tofu_version: ${{ inputs.tofu-version }}
|
||||||
cli_config_credentials_token: ${{ secrets.tf-api-token }}
|
cli_config_credentials_token: ${{ secrets.tf-api-token }}
|
||||||
- name: Clone repo
|
- name: Clone repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Clone blackbox repo
|
- name: Clone blackbox repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
repository: xaked/blackbox
|
repository: xaked/blackbox
|
||||||
path: blackbox
|
path: blackbox
|
||||||
@@ -57,7 +57,7 @@ jobs:
|
|||||||
private-key-name: id_ed25519
|
private-key-name: id_ed25519
|
||||||
known-hosts: ${{ secrets.ssh-known-hosts }}
|
known-hosts: ${{ secrets.ssh-known-hosts }}
|
||||||
- name: Restore tofu cache
|
- name: Restore tofu cache
|
||||||
uses: actions/cache@v4
|
uses: actions/cache@v5
|
||||||
id: cache-tofu-restore
|
id: cache-tofu-restore
|
||||||
with:
|
with:
|
||||||
path: .terraform
|
path: .terraform
|
||||||
@@ -77,7 +77,7 @@ jobs:
|
|||||||
shell: bash
|
shell: bash
|
||||||
run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode;
|
run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode;
|
||||||
- name: Upload artifacts
|
- name: Upload artifacts
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v6
|
||||||
with:
|
with:
|
||||||
name: artifacts
|
name: artifacts
|
||||||
path: |
|
path: |
|
||||||
@@ -90,7 +90,7 @@ jobs:
|
|||||||
exit 1;
|
exit 1;
|
||||||
fi
|
fi
|
||||||
- name: Save tofu cache
|
- name: Save tofu cache
|
||||||
uses: actions/cache/save@v4
|
uses: actions/cache/save@v5
|
||||||
id: cache-tofu-save
|
id: cache-tofu-save
|
||||||
with:
|
with:
|
||||||
path: .terraform
|
path: .terraform
|
||||||
|
|||||||
@@ -13,7 +13,7 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Clone blackbox repo
|
- name: Clone blackbox repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
repository: xaked/blackbox
|
repository: xaked/blackbox
|
||||||
path: blackbox
|
path: blackbox
|
||||||
|
|||||||
@@ -9,7 +9,7 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Clone repo
|
- name: Clone repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Run Trivy vulnerability scanner in IaC mode (LOW/MED)
|
- name: Run Trivy vulnerability scanner in IaC mode (LOW/MED)
|
||||||
uses: aquasecurity/trivy-action@master
|
uses: aquasecurity/trivy-action@master
|
||||||
with:
|
with:
|
||||||
|
|||||||
@@ -43,7 +43,7 @@ jobs:
|
|||||||
steps:
|
steps:
|
||||||
# Git Checkout
|
# Git Checkout
|
||||||
- name: Checkout Code
|
- name: Checkout Code
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
token: ${{ secrets.gitea-token }}
|
token: ${{ secrets.gitea-token }}
|
||||||
fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
|
fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
|
||||||
@@ -65,7 +65,7 @@ jobs:
|
|||||||
# Upload MegaLinter artifacts
|
# Upload MegaLinter artifacts
|
||||||
- name: Archive production artifacts
|
- name: Archive production artifacts
|
||||||
if: success() || failure()
|
if: success() || failure()
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v6
|
||||||
with:
|
with:
|
||||||
name: MegaLinter reports
|
name: MegaLinter reports
|
||||||
path: |
|
path: |
|
||||||
@@ -81,7 +81,7 @@ jobs:
|
|||||||
- name: Create Pull Request with applied fixes
|
- name: Create Pull Request with applied fixes
|
||||||
id: cpr
|
id: cpr
|
||||||
if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix')
|
if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix')
|
||||||
uses: peter-evans/create-pull-request@v6
|
uses: peter-evans/create-pull-request@v8
|
||||||
with:
|
with:
|
||||||
token: ${{ secrets.gitea-token }}
|
token: ${{ secrets.gitea-token }}
|
||||||
commit-message: "[MegaLinter] Apply linters automatic fixes"
|
commit-message: "[MegaLinter] Apply linters automatic fixes"
|
||||||
|
|||||||
@@ -22,10 +22,10 @@ jobs:
|
|||||||
|
|
||||||
steps:
|
steps:
|
||||||
- name: Clone repo
|
- name: Clone repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Retrieve artifacts
|
- name: Retrieve artifacts
|
||||||
id: download
|
id: download
|
||||||
uses: actions/download-artifact@v3
|
uses: actions/download-artifact@v7
|
||||||
with:
|
with:
|
||||||
name: artifacts
|
name: artifacts
|
||||||
- name: Check if job errored
|
- name: Check if job errored
|
||||||
@@ -37,7 +37,7 @@ jobs:
|
|||||||
exit "$(cat exitcode)";
|
exit "$(cat exitcode)";
|
||||||
fi
|
fi
|
||||||
- name: Clone blackbox repo
|
- name: Clone blackbox repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
if: ${{ steps.check.outputs.code == 2 }}
|
if: ${{ steps.check.outputs.code == 2 }}
|
||||||
with:
|
with:
|
||||||
repository: xaked/blackbox
|
repository: xaked/blackbox
|
||||||
@@ -71,7 +71,7 @@ jobs:
|
|||||||
known-hosts: ${{ secrets.ssh-known-hosts }}
|
known-hosts: ${{ secrets.ssh-known-hosts }}
|
||||||
- name: Restore terraform cache
|
- name: Restore terraform cache
|
||||||
if: ${{ steps.check.outputs.code == 2 }}
|
if: ${{ steps.check.outputs.code == 2 }}
|
||||||
uses: actions/cache@v4
|
uses: actions/cache@v5
|
||||||
id: cache-terraform-restore
|
id: cache-terraform-restore
|
||||||
with:
|
with:
|
||||||
path: .terraform
|
path: .terraform
|
||||||
@@ -91,7 +91,7 @@ jobs:
|
|||||||
run: terraform apply -input=false -auto-approve tfplan.binary;
|
run: terraform apply -input=false -auto-approve tfplan.binary;
|
||||||
- name: Save terraform cache
|
- name: Save terraform cache
|
||||||
if: ${{ steps.check.outputs.code == 2 }}
|
if: ${{ steps.check.outputs.code == 2 }}
|
||||||
uses: actions/cache/save@v4
|
uses: actions/cache/save@v5
|
||||||
id: cache-terraform-save
|
id: cache-terraform-save
|
||||||
with:
|
with:
|
||||||
path: .terraform
|
path: .terraform
|
||||||
|
|||||||
@@ -8,7 +8,7 @@ jobs:
|
|||||||
runs-on: ubuntu-latest
|
runs-on: ubuntu-latest
|
||||||
|
|
||||||
steps:
|
steps:
|
||||||
- uses: actions/checkout@v4
|
- uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
ref: ${{ github.event.pull_request.head.ref }}
|
ref: ${{ github.event.pull_request.head.ref }}
|
||||||
- name: Install terraform docs
|
- name: Install terraform docs
|
||||||
|
|||||||
@@ -26,9 +26,9 @@ jobs:
|
|||||||
terraform_version: 1.7.5
|
terraform_version: 1.7.5
|
||||||
cli_config_credentials_token: ${{ secrets.tf-api-token }}
|
cli_config_credentials_token: ${{ secrets.tf-api-token }}
|
||||||
- name: Clone repo
|
- name: Clone repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
- name: Clone blackbox repo
|
- name: Clone blackbox repo
|
||||||
uses: actions/checkout@v4
|
uses: actions/checkout@v6
|
||||||
with:
|
with:
|
||||||
repository: xaked/blackbox
|
repository: xaked/blackbox
|
||||||
path: blackbox
|
path: blackbox
|
||||||
@@ -52,7 +52,7 @@ jobs:
|
|||||||
private-key-name: id_ed25519
|
private-key-name: id_ed25519
|
||||||
known-hosts: ${{ secrets.ssh-known-hosts }}
|
known-hosts: ${{ secrets.ssh-known-hosts }}
|
||||||
- name: Restore terraform cache
|
- name: Restore terraform cache
|
||||||
uses: actions/cache@v4
|
uses: actions/cache@v5
|
||||||
id: cache-terraform-restore
|
id: cache-terraform-restore
|
||||||
with:
|
with:
|
||||||
path: .terraform
|
path: .terraform
|
||||||
@@ -72,7 +72,7 @@ jobs:
|
|||||||
shell: bash
|
shell: bash
|
||||||
run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode;
|
run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode;
|
||||||
- name: Upload artifacts
|
- name: Upload artifacts
|
||||||
uses: actions/upload-artifact@v3
|
uses: actions/upload-artifact@v6
|
||||||
with:
|
with:
|
||||||
name: artifacts
|
name: artifacts
|
||||||
path: |
|
path: |
|
||||||
@@ -85,7 +85,7 @@ jobs:
|
|||||||
exit 1;
|
exit 1;
|
||||||
fi
|
fi
|
||||||
- name: Save terraform cache
|
- name: Save terraform cache
|
||||||
uses: actions/cache/save@v4
|
uses: actions/cache/save@v5
|
||||||
id: cache-terraform-save
|
id: cache-terraform-save
|
||||||
with:
|
with:
|
||||||
path: .terraform
|
path: .terraform
|
||||||
|
|||||||
3
cog.toml
3
cog.toml
@@ -10,3 +10,6 @@
|
|||||||
# tf-apply = { path = ".gitea/workflows/tf-apply.yml" }
|
# tf-apply = { path = ".gitea/workflows/tf-apply.yml" }
|
||||||
# tf-docs = { path = ".gitea/workflows/tf-docs.yml" }
|
# tf-docs = { path = ".gitea/workflows/tf-docs.yml" }
|
||||||
# tf-plan = { path = ".gitea/workflows/tf-plan.yml" }
|
# tf-plan = { path = ".gitea/workflows/tf-plan.yml" }
|
||||||
|
[commit_types]
|
||||||
|
version = { bump_patch = true, changelog_title = "Version" }
|
||||||
|
chore = { bump_patch = true, changelog_title = "Chore" }
|
||||||
Reference in New Issue
Block a user