xaked/actions
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases 7 Wiki Activity

Compare commits

base: xaked:feature/update-cog-releaser
Branches Tags
xaked:main xaked:feature/update-cog-releaser
xaked:2.1.0 xaked:2.0.4 xaked:2.0.3 xaked:2.0.2 xaked:2.0.1 xaked:2.0.0 xaked:1.0.0
...
compare: xaked:2.0.1
Branches Tags
xaked:main xaked:feature/update-cog-releaser
xaked:2.1.0 xaked:2.0.4 xaked:2.0.3 xaked:2.0.2 xaked:2.0.1 xaked:2.0.0 xaked:1.0.0

9 Commits
feature/up ... 2.0.1

Author SHA1 Message Date
Mykhailo Nikiforov
173c01c9ca chore: update cocogitto config
All checks were successful
Cog release / Create release (push) Successful in 7s
Details
2026-01-03 17:40:45 +02:00
Renovate Bot
39fd0b7054 chore(deps): update peter-evans/create-pull-request action to v8
All checks were successful
Cog release / Create release (push) Successful in 7s
Details
2026-01-03 17:38:49 +02:00
Renovate Bot
9104c113dc chore(deps): update actions/cache action to v5
Some checks failed
Cog release / Create release (push) Has been cancelled
Details
2026-01-03 17:38:41 +02:00
Renovate Bot
2ce0f74e27 chore(deps): update github artifact actions
Some checks failed
Cog release / Create release (push) Has been cancelled
Details
2026-01-03 17:38:32 +02:00
Renovate Bot
728bae9120 chore(deps): update actions/checkout action to v6
All checks were successful
Cog check / Create release (pull_request) Successful in 11s
Details
Cog release / Create release (push) Successful in 8s
Details
2025-11-21 00:01:07 +00:00
Mykhailo Nikiforov
2ae472fd70 feat(cog): disable monorepo packages
All checks were successful
Cog release / Create release (push) Successful in 7s
Details
2024-11-21 22:53:30 +02:00
Mykhailo Nikiforov
bff92f363b feat(cog): format files
All checks were successful
Cog release / Create release (push) Successful in 7s
Details
2024-11-21 22:51:18 +02:00
Mykhailo Nikiforov
5eefad3bfc feat(cog): remove ability to specify if we need to check from latest tag only
All checks were successful
Cog Release / Create release (push) Successful in 7s
Details
2024-11-21 22:48:40 +02:00
Mykhailo Nikiforov
fcc9ac5d86 feat(cog): add ability to specify if we need to check from latest tag only 2024-11-21 22:40:53 +02:00
12 changed files with 61 additions and 43 deletions
Expand all files Collapse all files

2
.gitea/workflows/build-docker-image.yml
View File

@@ -21,7 +21,7 @@ jobs:
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4 uses: actions/checkout@v6
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v3 uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx - name: Set up Docker Buildx

11
.gitea/workflows/cog-check.yml
View File

@@ -1,7 +1,13 @@
name: Cog Check ---
name: Cog check
on: on:
pull_request: pull_request:
workflow_call: workflow_call:
# inputs:
# check-latest-tag-only:
# type: boolean
# required: false
# default: true
jobs: jobs:
release: release:
@@ -9,13 +15,14 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v6
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Semver release - name: Semver release
uses: cocogitto/cocogitto-action@v3 uses: cocogitto/cocogitto-action@v3
with: with:
# check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
check-latest-tag-only: true check-latest-tag-only: true
git-user: "gitea-bot" git-user: "gitea-bot"
git-user-email: "bot@git.palkoi.net" git-user-email: "bot@git.palkoi.net"

12
.gitea/workflows/cog-release.yml
View File

@@ -1,9 +1,15 @@
name: Cog Release ---
name: Cog release
on: on:
push: push:
branches: branches:
- main - main
workflow_call: workflow_call:
# inputs:
# check-latest-tag-only:
# type: boolean
# required: false
# default: true
jobs: jobs:
release: release:
@@ -11,7 +17,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v6
with: with:
fetch-depth: 0 fetch-depth: 0
@@ -28,6 +34,8 @@ jobs:
release: true release: true
git-user: "gitea-bot" git-user: "gitea-bot"
git-user-email: "bot@git.palkoi.net" git-user-email: "bot@git.palkoi.net"
check-latest-tag-only: true
# check-latest-tag-only: ${{ inputs.check-latest-tag-only }}
- name: Generate Changelog - name: Generate Changelog
run: cog changelog --at ${{ steps.release.outputs.version }} -t full_hash > GITHUB_CHANGELOG.md run: cog changelog --at ${{ steps.release.outputs.version }} -t full_hash > GITHUB_CHANGELOG.md

10
.gitea/workflows/otf-apply.yml
View File

@@ -27,10 +27,10 @@ jobs:
steps: steps:
- name: Clone repo - name: Clone repo
uses: actions/checkout@v4 uses: actions/checkout@v6
- name: Retrieve artifacts - name: Retrieve artifacts
id: download id: download
uses: actions/download-artifact@v3 uses: actions/download-artifact@v7
with: with:
name: artifacts name: artifacts
- name: Check if job errored - name: Check if job errored
@@ -42,7 +42,7 @@ jobs:
exit "$(cat exitcode)"; exit "$(cat exitcode)";
fi fi
- name: Clone blackbox repo - name: Clone blackbox repo
uses: actions/checkout@v4 uses: actions/checkout@v6
if: ${{ steps.check.outputs.code == 2 }} if: ${{ steps.check.outputs.code == 2 }}
with: with:
repository: xaked/blackbox repository: xaked/blackbox
@@ -76,7 +76,7 @@ jobs:
known-hosts: ${{ secrets.ssh-known-hosts }} known-hosts: ${{ secrets.ssh-known-hosts }}
- name: Restore tofu cache - name: Restore tofu cache
if: ${{ steps.check.outputs.code == 2 }} if: ${{ steps.check.outputs.code == 2 }}
uses: actions/cache@v4 uses: actions/cache@v5
id: cache-tofu-restore id: cache-tofu-restore
with: with:
path: .terraform path: .terraform
@@ -96,7 +96,7 @@ jobs:
run: tofu apply -input=false -auto-approve tfplan.binary; run: tofu apply -input=false -auto-approve tfplan.binary;
- name: Save tofu cache - name: Save tofu cache
if: ${{ steps.check.outputs.code == 2 }} if: ${{ steps.check.outputs.code == 2 }}
uses: actions/cache/save@v4 uses: actions/cache/save@v5
id: cache-tofu-save id: cache-tofu-save
with: with:
path: .terraform path: .terraform

10
.gitea/workflows/otf-plan.yml
View File

@@ -31,9 +31,9 @@ jobs:
tofu_version: ${{ inputs.tofu-version }} tofu_version: ${{ inputs.tofu-version }}
cli_config_credentials_token: ${{ secrets.tf-api-token }} cli_config_credentials_token: ${{ secrets.tf-api-token }}
- name: Clone repo - name: Clone repo
uses: actions/checkout@v4 uses: actions/checkout@v6
- name: Clone blackbox repo - name: Clone blackbox repo
uses: actions/checkout@v4 uses: actions/checkout@v6
with: with:
repository: xaked/blackbox repository: xaked/blackbox
path: blackbox path: blackbox
@@ -57,7 +57,7 @@ jobs:
private-key-name: id_ed25519 private-key-name: id_ed25519
known-hosts: ${{ secrets.ssh-known-hosts }} known-hosts: ${{ secrets.ssh-known-hosts }}
- name: Restore tofu cache - name: Restore tofu cache
uses: actions/cache@v4 uses: actions/cache@v5
id: cache-tofu-restore id: cache-tofu-restore
with: with:
path: .terraform path: .terraform
@@ -77,7 +77,7 @@ jobs:
shell: bash shell: bash
run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode; run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode;
- name: Upload artifacts - name: Upload artifacts
uses: actions/upload-artifact@v3 uses: actions/upload-artifact@v6
with: with:
name: artifacts name: artifacts
path: | path: |
@@ -90,7 +90,7 @@ jobs:
exit 1; exit 1;
fi fi
- name: Save tofu cache - name: Save tofu cache
uses: actions/cache/save@v4 uses: actions/cache/save@v5
id: cache-tofu-save id: cache-tofu-save
with: with:
path: .terraform path: .terraform

2
.gitea/workflows/sec-blackbox-decrypt.yml
View File

@@ -13,7 +13,7 @@ jobs:
steps: steps:
- name: Clone blackbox repo - name: Clone blackbox repo
uses: actions/checkout@v4 uses: actions/checkout@v6
with: with:
repository: xaked/blackbox repository: xaked/blackbox
path: blackbox path: blackbox

2
.gitea/workflows/sec-checks-trivy.yml
View File

@@ -9,7 +9,7 @@ jobs:
steps: steps:
- name: Clone repo - name: Clone repo
uses: actions/checkout@v4 uses: actions/checkout@v6
- name: Run Trivy vulnerability scanner in IaC mode (LOW/MED) - name: Run Trivy vulnerability scanner in IaC mode (LOW/MED)
uses: aquasecurity/trivy-action@master uses: aquasecurity/trivy-action@master
with: with:

6
.gitea/workflows/sec-megalinter.yml
View File

@@ -43,7 +43,7 @@ jobs:
steps: steps:
# Git Checkout # Git Checkout
- name: Checkout Code - name: Checkout Code
uses: actions/checkout@v4 uses: actions/checkout@v6
with: with:
token: ${{ secrets.gitea-token }} token: ${{ secrets.gitea-token }}
fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
@@ -65,7 +65,7 @@ jobs:
# Upload MegaLinter artifacts # Upload MegaLinter artifacts
- name: Archive production artifacts - name: Archive production artifacts
if: success() || failure() if: success() || failure()
uses: actions/upload-artifact@v3 uses: actions/upload-artifact@v6
with: with:
name: MegaLinter reports name: MegaLinter reports
path: | path: |
@@ -81,7 +81,7 @@ jobs:
- name: Create Pull Request with applied fixes - name: Create Pull Request with applied fixes
id: cpr id: cpr
if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix') if: steps.ml.outputs.has_updated_sources == 1 && (env.APPLY_FIXES_EVENT == 'all' || env.APPLY_FIXES_EVENT == github.event_name) && env.APPLY_FIXES_MODE == 'pull_request' && (github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository) && !contains(github.event.head_commit.message, 'skip fix')
uses: peter-evans/create-pull-request@v6 uses: peter-evans/create-pull-request@v8
with: with:
token: ${{ secrets.gitea-token }} token: ${{ secrets.gitea-token }}
commit-message: "[MegaLinter] Apply linters automatic fixes" commit-message: "[MegaLinter] Apply linters automatic fixes"

10
.gitea/workflows/tf-apply.yml
View File

@@ -22,10 +22,10 @@ jobs:
steps: steps:
- name: Clone repo - name: Clone repo
uses: actions/checkout@v4 uses: actions/checkout@v6
- name: Retrieve artifacts - name: Retrieve artifacts
id: download id: download
uses: actions/download-artifact@v3 uses: actions/download-artifact@v7
with: with:
name: artifacts name: artifacts
- name: Check if job errored - name: Check if job errored
@@ -37,7 +37,7 @@ jobs:
exit "$(cat exitcode)"; exit "$(cat exitcode)";
fi fi
- name: Clone blackbox repo - name: Clone blackbox repo
uses: actions/checkout@v4 uses: actions/checkout@v6
if: ${{ steps.check.outputs.code == 2 }} if: ${{ steps.check.outputs.code == 2 }}
with: with:
repository: xaked/blackbox repository: xaked/blackbox
@@ -71,7 +71,7 @@ jobs:
known-hosts: ${{ secrets.ssh-known-hosts }} known-hosts: ${{ secrets.ssh-known-hosts }}
- name: Restore terraform cache - name: Restore terraform cache
if: ${{ steps.check.outputs.code == 2 }} if: ${{ steps.check.outputs.code == 2 }}
uses: actions/cache@v4 uses: actions/cache@v5
id: cache-terraform-restore id: cache-terraform-restore
with: with:
path: .terraform path: .terraform
@@ -91,7 +91,7 @@ jobs:
run: terraform apply -input=false -auto-approve tfplan.binary; run: terraform apply -input=false -auto-approve tfplan.binary;
- name: Save terraform cache - name: Save terraform cache
if: ${{ steps.check.outputs.code == 2 }} if: ${{ steps.check.outputs.code == 2 }}
uses: actions/cache/save@v4 uses: actions/cache/save@v5
id: cache-terraform-save id: cache-terraform-save
with: with:
path: .terraform path: .terraform

2
.gitea/workflows/tf-docs.yml
View File

@@ -8,7 +8,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v6
with: with:
ref: ${{ github.event.pull_request.head.ref }} ref: ${{ github.event.pull_request.head.ref }}
- name: Install terraform docs - name: Install terraform docs

10
.gitea/workflows/tf-plan.yml
View File

@@ -26,9 +26,9 @@ jobs:
terraform_version: 1.7.5 terraform_version: 1.7.5
cli_config_credentials_token: ${{ secrets.tf-api-token }} cli_config_credentials_token: ${{ secrets.tf-api-token }}
- name: Clone repo - name: Clone repo
uses: actions/checkout@v4 uses: actions/checkout@v6
- name: Clone blackbox repo - name: Clone blackbox repo
uses: actions/checkout@v4 uses: actions/checkout@v6
with: with:
repository: xaked/blackbox repository: xaked/blackbox
path: blackbox path: blackbox
@@ -52,7 +52,7 @@ jobs:
private-key-name: id_ed25519 private-key-name: id_ed25519
known-hosts: ${{ secrets.ssh-known-hosts }} known-hosts: ${{ secrets.ssh-known-hosts }}
- name: Restore terraform cache - name: Restore terraform cache
uses: actions/cache@v4 uses: actions/cache@v5
id: cache-terraform-restore id: cache-terraform-restore
with: with:
path: .terraform path: .terraform
@@ -72,7 +72,7 @@ jobs:
shell: bash shell: bash
run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode; run: printf "${{ steps.tfplan.outputs.exitcode }}" > exitcode;
- name: Upload artifacts - name: Upload artifacts
uses: actions/upload-artifact@v3 uses: actions/upload-artifact@v6
with: with:
name: artifacts name: artifacts
path: | path: |
@@ -85,7 +85,7 @@ jobs:
exit 1; exit 1;
fi fi
- name: Save terraform cache - name: Save terraform cache
uses: actions/cache/save@v4 uses: actions/cache/save@v5
id: cache-terraform-save id: cache-terraform-save
with: with:
path: .terraform path: .terraform

27
cog.toml
View File

@@ -1,12 +1,15 @@
[packages] # [packages]
build-docker-image = { path = ".gitea/workflows/build-docker-image" } # build-docker-image = { path = ".gitea/workflows/build-docker-image.yml" }
cog-check = { path = ".gitea/workflows/cog-check.yml" } # cog-check = { path = ".gitea/workflows/cog-check.yml" }
cog-release = { path = ".gitea/workflows/cog-release.yml" } # cog-release = { path = ".gitea/workflows/cog-release.yml" }
otf-apply = { path = ".gitea/workflows/otf-apply.yml" } # otf-apply = { path = ".gitea/workflows/otf-apply.yml" }
otf-plan = { path = ".gitea/workflows/otf-plan.yml" } # otf-plan = { path = ".gitea/workflows/otf-plan.yml" }
sec-blackbox-decrypt = { path = ".gitea/workflows/sec-blackbox-decrypt.yml" } # sec-blackbox-decrypt = { path = ".gitea/workflows/sec-blackbox-decrypt.yml" }
sec-checks-trivy = { path = ".gitea/workflows/sec-checks-trivy.yml" } # sec-checks-trivy = { path = ".gitea/workflows/sec-checks-trivy.yml" }
sec-megalinter = { path = ".gitea/workflows/sec-megalinter.yml" } # sec-megalinter = { path = ".gitea/workflows/sec-megalinter.yml" }
tf-apply = { path = ".gitea/workflows/tf-apply.yml" } # tf-apply = { path = ".gitea/workflows/tf-apply.yml" }
tf-docs = { path = ".gitea/workflows/tf-docs.yml" } # tf-docs = { path = ".gitea/workflows/tf-docs.yml" }
tf-plan = { path = ".gitea/workflows/tf-plan.yml" } # tf-plan = { path = ".gitea/workflows/tf-plan.yml" }
[commit_types]
version = { bump_patch = true, changelog_title = "Version" }
chore = { bump_patch = true, changelog_title = "Chore" }