83fe18553d
feat(ci): Update .gitea/workflows/ci.yml ( #15 )
...
Release / Tag release (push) Successful in 11s
Release / Create Release (push) Successful in 5s
Release / Publish Docker Images (push) Successful in 1m0s
Okay, I will review the provided Git diff and explain the proposed changes. Here's a breakdown:
**File:** `.gitea/workflows/ci.yml`
This file defines the CI (Continuous Integration) workflow for the Gitea repository. The workflow is triggered on certain events (likely pushes and pull requests).
**Changes:**
1. **Hadolint Action:**
* The change introduces a `name` field to the `hadolint-action` step, renaming it to "Run Hadolint". This improves the readability of the workflow execution logs.
2. **SonarQube Scan (Commented Out):**
* The SonarQube Scan action is commented out. This means that the SonarQube static analysis will no longer be performed as part of the CI workflow *for now*. The environment variables `SONAR_HOST_URL` and `SONAR_TOKEN` were used to authenticate with SonarQube and are now also commented out.
3. **Snyk SAST Scan:**
* A new step called "Snyk SAST Scan" is added. This step uses the `snyk/actions/python@master` action to perform static application security testing (SAST) using Snyk.
* It uses the `SNYK_TOKEN` secret to authenticate with Snyk.
* The `args` parameter is set to `snyk code test --all-projects --exclude=.archive`. This tells Snyk to scan all projects in the repository for security vulnerabilities and to exclude the `.archive` directory from the scan.
**Summary:**
The primary changes are the addition of a Snyk SAST scan and the temporary removal of the SonarQube scan from the CI workflow. Hadolint was updated with a name to provide clarity. The Snyk scan performs static analysis to identify potential security vulnerabilities directly in the codebase. The SonarQube scan is commented out, possibly for temporary reasons such as configuration issues, cost optimization, or replacement by the Snyk SAST scan.
Reviewed-on: #15
2025-06-08 10:47:31 +02:00
7981877152
chore(deps): update sonarsource/sonarqube-scan-action action to v5.2.0 ( #11 )
...
Release / Create Release (push) Successful in 1m11s
Release / Print Release (push) Successful in 20s
Release / Publish Docker Images (push) Failing after 5m2s
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [SonarSource/sonarqube-scan-action](https://github.com/SonarSource/sonarqube-scan-action ) | action | minor | `v5.1.0` -> `v5.2.0` |
---
### Release Notes
<details>
<summary>SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)</summary>
### [`v5.2.0`](https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v5.2.0 )
[Compare Source](https://github.com/SonarSource/sonarqube-scan-action/compare/v5.1.0...v5.2.0 )
#### What's Changed
- SQSCANGHA-90 remove mend dead conf by [@​pierre-guillot-gh](https://github.com/pierre-guillot-gh ) in https://github.com/SonarSource/sonarqube-scan-action/pull/184
- SQSCANGHA-89 Attempt to fix command injection by [@​henryju](https://github.com/henryju ) in https://github.com/SonarSource/sonarqube-scan-action/pull/186
- SQSCANGHA-93 Fix madhead/semver-utils' version by [@​csaba-feher-sonarsource](https://github.com/csaba-feher-sonarsource ) in https://github.com/SonarSource/sonarqube-scan-action/pull/187
- SQSCANGHA-94 Update version update logic by [@​csaba-feher-sonarsource](https://github.com/csaba-feher-sonarsource ) in https://github.com/SonarSource/sonarqube-scan-action/pull/188
- SQSCANGHA-92 Validate scanner version by [@​csaba-feher-sonarsource](https://github.com/csaba-feher-sonarsource ) in https://github.com/SonarSource/sonarqube-scan-action/pull/189
**Full Changelog**: https://github.com/SonarSource/sonarqube-scan-action/compare/v5...v5.2.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MC4wLjkiLCJ1cGRhdGVkSW5WZXIiOiI0MC4wLjkiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInR5cGUvZGVwZW5kZW5jaWVzIl19-->
Reviewed-on: #11
Co-authored-by: Renovate [BOT] <renovate-bot@git.tainton.uk >
Co-committed-by: Renovate [BOT] <renovate-bot@git.tainton.uk >
2025-05-06 21:19:11 +02:00
0121c607be
chore(deps): update sonarsource/sonarqube-scan-action action to v5.1.0 ( #10 )
...
Release / Create Release (push) Successful in 30s
Release / Print Release (push) Successful in 5s
Release / Publish Docker Images (push) Failing after 1m56s
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [SonarSource/sonarqube-scan-action](https://github.com/SonarSource/sonarqube-scan-action ) | action | minor | `v5.0.0` -> `v5.1.0` |
---
### Release Notes
<details>
<summary>SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)</summary>
### [`v5.1.0`](https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v5.1.0 )
[Compare Source](https://github.com/SonarSource/sonarqube-scan-action/compare/v5.0.0...v5.1.0 )
#### What's Changed
- Update SonarScanner CLI to 7.1.0.4889 to support sonar.region=us by [@​github-actions](https://github.com/github-actions ) in https://github.com/SonarSource/sonarqube-scan-action/pull/183
**Full Changelog**: https://github.com/SonarSource/sonarqube-scan-action/compare/v5.0.0...v5.1.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4yMTEuNCIsInVwZGF0ZWRJblZlciI6IjM5LjIxMS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->
Reviewed-on: #10
Reviewed-by: Luke Tainton <luke@tainton.uk >
Co-authored-by: Renovate [BOT] <renovate-bot@git.tainton.uk >
Co-committed-by: Renovate [BOT] <renovate-bot@git.tainton.uk >
2025-03-24 16:45:34 +01:00
34853ccd5d
chore(deps): update sonarsource/sonarqube-scan-action action to v5 ( #7 )
...
Release / Create Release (push) Successful in 8s
Release / Print Release (push) Successful in 2s
Release / Publish Docker Images (push) Failing after 38s
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [SonarSource/sonarqube-scan-action](https://github.com/SonarSource/sonarqube-scan-action ) | action | major | `v4.2.1` -> `v5.0.0` |
---
### Release Notes
<details>
<summary>SonarSource/sonarqube-scan-action (SonarSource/sonarqube-scan-action)</summary>
### [`v5.0.0`](https://github.com/SonarSource/sonarqube-scan-action/releases/tag/v5.0.0 )
[Compare Source](https://github.com/SonarSource/sonarqube-scan-action/compare/v4.2.1...v5.0.0 )
#### What's Changed
- SQSCANGHA-81 Update SonarScanner CLI to 7.0.2.4839 by [@​github-actions](https://github.com/github-actions ) in https://github.com/SonarSource/sonarqube-scan-action/pull/175
**Full Changelog**: https://github.com/SonarSource/sonarqube-scan-action/compare/v4...v5.0.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xNzEuMyIsInVwZGF0ZWRJblZlciI6IjM5LjE3MS4zIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJ0eXBlL2RlcGVuZGVuY2llcyJdfQ==-->
Reviewed-on: #7
Reviewed-by: Luke Tainton <luke@tainton.uk >
Co-authored-by: Renovate [BOT] <renovate-bot@git.tainton.uk >
Co-committed-by: Renovate [BOT] <renovate-bot@git.tainton.uk >
2025-02-17 12:02:10 +01:00
7c0587314e
feat(ci): switch to self-hosted SonarQube
Validate PR Title / validate (pull_request) Successful in 37s
CI / ci (pull_request) Successful in 1m35s
Release / Test (push) Failing after 1s
Release / Create Release (push) Has been skipped
Release / Print Release (push) Has been skipped
Release / Publish Docker Images (push) Has been skipped
2025-02-09 21:08:54 +00:00
dcb11b3faf
feat(ci): add SonarQube Cloud ( #1 )
...
Release / Test (push) Successful in 44s
Release / Create Release (push) Successful in 10s
Build Docker / Create Docker Image (release) Failing after 1s
Release / Print Release (push) Successful in 3s
Reviewed-on: public/docker-dnsmasq#1
2025-01-15 23:35:41 +01:00
