Commit graph

75 commits

Author SHA1 Message Date
Ralf Vogler
8ba46c52ec eslint with sarif upload
example from https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/uploading-a-sarif-file-to-github#example-workflow-that-runs-the-eslint-analysis-tool
2025-05-24 23:11:19 +02:00
Ralf Vogler
02005b6fee skip docker push for PRs 2025-05-24 22:40:22 +02:00
vogler
5f1458413d [MegaLinter] Apply linters fixes 2025-05-24 20:25:18 +00:00
Ralf Vogler
a7b882f3a1 added PAT for megalinter with workflows permission
https://github.com/orgs/community/discussions/35410
2025-05-24 22:22:36 +02:00
Ralf Vogler
e7a00d7d18 megalinter apparently can't push commit fixing workflows without a sep. PAT
See https://github.com/orgs/community/discussions/26711
2025-05-24 21:51:53 +02:00
Ralf Vogler
b4123e5e1d remove super-linter in favor of mega-linter 2025-05-24 21:21:23 +02:00
Ralf Vogler
9fa9325566 megalinter: job summary from markdown file 2025-05-24 21:03:23 +02:00
Ralf Vogler
1ed84a0a60 megalinter: upload-sarif category 2025-05-24 20:51:50 +02:00
Ralf Vogler
6309fc5a37 megalinter: upload-sarif needs more permissons?
https://github.com/github/codeql-action/issues/1806
2025-05-24 19:55:10 +02:00
Ralf Vogler
056494c9dc megalinter customize config; local run ~7min...
```console
$ npx mega-linter-runner -r v8 -f cupcake
+----SUMMARY----+--------------------------+---------------+-------+-------+--------+----------+--------------+
| Descriptor    | Linter                   | Mode          | Files | Fixed | Errors | Warnings | Elapsed time |
+---------------+--------------------------+---------------+-------+-------+--------+----------+--------------+
|  ACTION     | actionlint               | list_of_files |     4 |       |      0 |        0 | 3.25s        |
|  BASH       | bash-exec                | file          |     1 |       |      0 |        0 | 2.77s        |
|  BASH       | shellcheck               | list_of_files |     1 |       |      0 |        0 | 1.16s        |
|  BASH       | shfmt                    | list_of_files |     1 |     0 |      0 |        0 | 0.6s         |
| ⚠️ COPYPASTE  | jscpd                    | project       |   n/a |       |      8 |        0 | 24.82s       |
| ⚠️ DOCKERFILE | hadolint                 | list_of_files |     1 |       |      4 |        0 | 6.74s        |
| ⚠️ JAVASCRIPT | eslint                   | list_of_files |    15 |     0 |      1 |        0 | 11.04s       |
|  JSON       | jsonlint                 | list_of_files |     7 |       |      0 |        0 | 4.76s        |
|  JSON       | npm-package-json-lint    | project       |   n/a |       |      0 |        0 | 3.26s        |
|  JSON       | prettier                 | list_of_files |     7 |     0 |      0 |        0 | 5.08s        |
|  JSON       | v8r                      | list_of_files |     7 |       |      0 |        0 | 47.96s       |
|  MARKDOWN   | markdownlint             | list_of_files |     2 |     0 |      0 |        0 | 12.16s       |
|  MARKDOWN   | markdown-table-formatter | list_of_files |     2 |     0 |      0 |        0 | 4.15s        |
| ⚠️ REPOSITORY | checkov                  | project       |   n/a |       |      3 |        0 | 112.11s      |
|  REPOSITORY | gitleaks                 | project       |   n/a |       |      0 |        0 | 3.09s        |
|  REPOSITORY | git_diff                 | project       |   n/a |       |      0 |        0 | 1.22s        |
|  REPOSITORY | grype                    | project       |   n/a |       |      0 |        0 | 159.7s       |
| ⚠️ REPOSITORY | kics                     | project       |   n/a |       |     24 |        0 | 14.82s       |
|  REPOSITORY | secretlint               | project       |   n/a |       |      0 |        0 | 7.24s        |
|  REPOSITORY | syft                     | project       |   n/a |       |      0 |        0 | 7.83s        |
| ⚠️ REPOSITORY | trivy                    | project       |   n/a |       |      2 |        0 | 28.16s       |
|  REPOSITORY | trufflehog               | project       |   n/a |       |      0 |        0 | 26.51s       |
| ⚠️ SPELL      | cspell                   | list_of_files |    40 |       |    224 |        0 | 82.25s       |
| ⚠️ SPELL      | lychee                   | list_of_files |    17 |       |      9 |        0 | 10.28s       |
|  YAML       | prettier                 | list_of_files |     8 |     1 |      0 |        0 | 9.12s        |
|  YAML       | v8r                      | list_of_files |     8 |       |      0 |        0 | 39.07s       |
|  YAML       | yamllint                 | list_of_files |     8 |       |      0 |        0 | 5.39s        |
+---------------+--------------------------+---------------+-------+-------+--------+----------+--------------+
```
2025-05-24 19:41:33 +02:00
Ralf Vogler
a040108e92 megalinter "''" needed for lists in env var 2025-05-24 15:50:08 +02:00
Ralf Vogler
ec3db19fb5 megalinter yaml (funny that this complains about their own generated config...) 2025-05-24 15:38:27 +02:00
Ralf Vogler
0495486cde comment how to run locally 2025-05-24 15:33:19 +02:00
Ralf Vogler
91fe3aee80 run for PRs against main or dev 2025-05-24 15:33:05 +02:00
Ralf Vogler
847c921bca use megalinter cupcake flavor (88 vs 127 linter, 5 vs 10GB image) 2025-05-24 15:32:45 +02:00
Ralf Vogler
5a9cc0cb3a npx mega-linter-runner --install # all defaults 2025-05-23 00:54:32 +02:00
Ralf Vogler
0b27cf0a44 lint.yml -> super-linter.yml 2025-05-23 00:54:04 +02:00
Ralf Vogler
5d48716ef1 docker: GitHub doesn't show labels due to multi-arch image -> add annotation level index 2025-05-22 23:52:23 +02:00
Ralf Vogler
ada40d05ec docker: use metadata-action for tags and labels
https://github.com/docker/metadata-action
Packages on GitHub lack description since labels from Dockerfile are not used:
https://github.com/vogler/free-games-claimer/pkgs/container/free-games-claimer/421753259
2025-05-22 23:26:11 +02:00
Ralf Vogler
0e00cfd7fb dependabot: ignore eslint and group devDependencies into one PR 2025-05-22 22:33:42 +02:00
Ralf Vogler
1dbbfaf3ad lint: fix most super-linter errors 2025-05-16 02:07:40 +02:00
Ralf Vogler
99c1f05302 Merge branch 'dev' 2025-05-16 00:15:45 +02:00
Ralf Vogler
991e0a1449 docker: only build branches main, dev
Otherwise branches will accumulate in 'Recent tagged image version'
https://github.com/vogler/free-games-claimer/pkgs/container/free-games-claimer
2025-05-16 00:14:10 +02:00
Ralf Vogler
cea5b11c95 mv renovate.json .github/ 2025-05-16 00:06:39 +02:00
Ralf Vogler
158caa6164
Merge pull request #469 from vogler/renovate/super-linter-super-linter-7.x 2025-05-16 00:01:31 +02:00
Ralf Vogler
bf0c9032cc need 'packages: write' permission for ghcr.io 2025-05-14 01:59:37 +02:00
Ralf Vogler
4ce0d44b79 can't check secrets in if expr... 2025-05-14 01:44:14 +02:00
Ralf Vogler
7c8682ac91 build docker image for each branch/PR? 2025-05-14 01:31:04 +02:00
Ralf Vogler
a5ce5ec816 fix CodeQL alerts 5-7
https://github.com/vogler/free-games-claimer/security/code-scanning/5
https://github.com/vogler/free-games-claimer/security/code-scanning/6
https://github.com/vogler/free-games-claimer/security/code-scanning/7
2025-05-14 00:46:37 +02:00
renovate[bot]
3e13e9fba8
chore(deps): update super-linter/super-linter action to v7.4.0 2025-05-13 20:29:21 +00:00
Ralf Vogler
8b7018f54c fix actionlint errors (docker.yml)
Double quote to prevent globbing and word splitting
2025-03-27 16:26:40 +01:00
renovate[bot]
e75975b273
chore(deps): update docker/build-push-action action to v6 2025-03-05 14:54:01 +00:00
Ralf Vogler
6aa0f9b817 super-linter: problem matchers included? 2025-03-05 15:34:03 +01:00
Ralf Vogler
bf2216f731 super-linter: TODO fix-lint-issues 2025-03-05 15:27:00 +01:00
Ralf Vogler
d6666aed03 super-linter: use slim version 2025-03-05 15:17:34 +01:00
Ralf Vogler
fed03428f3 try super-linter
https://github.com/marketplace/actions/super-linter#get-started
2025-03-05 15:07:37 +01:00
Ralf Vogler
23a611a2f1 ci/docker: fix: tag main as latest 2024-08-02 13:19:39 +02:00
Ralf Vogler
eac11e8949 ci/docker: force tag main as latest since many people pull it 2024-08-02 13:06:28 +02:00
Ralf Vogler
4518914bfd
Update FUNDING.yml 2023-12-24 17:04:37 +01:00
Ralf Vogler
377ee736cb
Update FUNDING.yml 2023-12-24 16:29:05 +01:00
Ralf Vogler
2dec0080d9
Update FUNDING.yml 2023-12-24 16:23:01 +01:00
Ralf Vogler
a2af1ccd09
Update FUNDING.yml 2023-12-24 16:22:35 +01:00
Ralf Vogler
e66d10574d
Update FUNDING.yml 2023-12-24 16:21:15 +01:00
Ralf Vogler
2a19100601
Update FUNDING.yml 2023-12-24 15:39:38 +01:00
Ralf Vogler
5343535429
Create FUNDING.yml 2023-12-24 01:10:17 +01:00
dependabot[bot]
324f6bffe7
build(deps): bump actions/setup-node from 3 to 4
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-13 06:01:59 +00:00
Ralf Vogler
c5f75e06c8 gha: sonar: disable shallow clone (irrelevant) to get rid of warning 2023-11-08 01:36:35 +01:00
Ralf Vogler
d4685ff370 gha: sonar: install dev deps for eslint plugins 2023-11-08 01:32:20 +01:00
Ralf Vogler
6a34cb541d format sonar.yml 2023-11-07 18:03:54 +01:00
Ralf Vogler
6113ea4b8d
Merge branch 'main' into ci 2023-11-07 17:32:00 +01:00