Commit graph

59 commits

Author SHA1 Message Date
Ralf Vogler
b4123e5e1d remove super-linter in favor of mega-linter 2025-05-24 21:21:23 +02:00
Ralf Vogler
9fa9325566 megalinter: job summary from markdown file 2025-05-24 21:03:23 +02:00
Ralf Vogler
1ed84a0a60 megalinter: upload-sarif category 2025-05-24 20:51:50 +02:00
Ralf Vogler
6309fc5a37 megalinter: upload-sarif needs more permissons?
https://github.com/github/codeql-action/issues/1806
2025-05-24 19:55:10 +02:00
Ralf Vogler
056494c9dc megalinter customize config; local run ~7min...
```console
$ npx mega-linter-runner -r v8 -f cupcake
+----SUMMARY----+--------------------------+---------------+-------+-------+--------+----------+--------------+
| Descriptor    | Linter                   | Mode          | Files | Fixed | Errors | Warnings | Elapsed time |
+---------------+--------------------------+---------------+-------+-------+--------+----------+--------------+
|  ACTION     | actionlint               | list_of_files |     4 |       |      0 |        0 | 3.25s        |
|  BASH       | bash-exec                | file          |     1 |       |      0 |        0 | 2.77s        |
|  BASH       | shellcheck               | list_of_files |     1 |       |      0 |        0 | 1.16s        |
|  BASH       | shfmt                    | list_of_files |     1 |     0 |      0 |        0 | 0.6s         |
| ⚠️ COPYPASTE  | jscpd                    | project       |   n/a |       |      8 |        0 | 24.82s       |
| ⚠️ DOCKERFILE | hadolint                 | list_of_files |     1 |       |      4 |        0 | 6.74s        |
| ⚠️ JAVASCRIPT | eslint                   | list_of_files |    15 |     0 |      1 |        0 | 11.04s       |
|  JSON       | jsonlint                 | list_of_files |     7 |       |      0 |        0 | 4.76s        |
|  JSON       | npm-package-json-lint    | project       |   n/a |       |      0 |        0 | 3.26s        |
|  JSON       | prettier                 | list_of_files |     7 |     0 |      0 |        0 | 5.08s        |
|  JSON       | v8r                      | list_of_files |     7 |       |      0 |        0 | 47.96s       |
|  MARKDOWN   | markdownlint             | list_of_files |     2 |     0 |      0 |        0 | 12.16s       |
|  MARKDOWN   | markdown-table-formatter | list_of_files |     2 |     0 |      0 |        0 | 4.15s        |
| ⚠️ REPOSITORY | checkov                  | project       |   n/a |       |      3 |        0 | 112.11s      |
|  REPOSITORY | gitleaks                 | project       |   n/a |       |      0 |        0 | 3.09s        |
|  REPOSITORY | git_diff                 | project       |   n/a |       |      0 |        0 | 1.22s        |
|  REPOSITORY | grype                    | project       |   n/a |       |      0 |        0 | 159.7s       |
| ⚠️ REPOSITORY | kics                     | project       |   n/a |       |     24 |        0 | 14.82s       |
|  REPOSITORY | secretlint               | project       |   n/a |       |      0 |        0 | 7.24s        |
|  REPOSITORY | syft                     | project       |   n/a |       |      0 |        0 | 7.83s        |
| ⚠️ REPOSITORY | trivy                    | project       |   n/a |       |      2 |        0 | 28.16s       |
|  REPOSITORY | trufflehog               | project       |   n/a |       |      0 |        0 | 26.51s       |
| ⚠️ SPELL      | cspell                   | list_of_files |    40 |       |    224 |        0 | 82.25s       |
| ⚠️ SPELL      | lychee                   | list_of_files |    17 |       |      9 |        0 | 10.28s       |
|  YAML       | prettier                 | list_of_files |     8 |     1 |      0 |        0 | 9.12s        |
|  YAML       | v8r                      | list_of_files |     8 |       |      0 |        0 | 39.07s       |
|  YAML       | yamllint                 | list_of_files |     8 |       |      0 |        0 | 5.39s        |
+---------------+--------------------------+---------------+-------+-------+--------+----------+--------------+
```
2025-05-24 19:41:33 +02:00
Ralf Vogler
a040108e92 megalinter "''" needed for lists in env var 2025-05-24 15:50:08 +02:00
Ralf Vogler
ec3db19fb5 megalinter yaml (funny that this complains about their own generated config...) 2025-05-24 15:38:27 +02:00
Ralf Vogler
0495486cde comment how to run locally 2025-05-24 15:33:19 +02:00
Ralf Vogler
91fe3aee80 run for PRs against main or dev 2025-05-24 15:33:05 +02:00
Ralf Vogler
847c921bca use megalinter cupcake flavor (88 vs 127 linter, 5 vs 10GB image) 2025-05-24 15:32:45 +02:00
Ralf Vogler
5a9cc0cb3a npx mega-linter-runner --install # all defaults 2025-05-23 00:54:32 +02:00
Ralf Vogler
0b27cf0a44 lint.yml -> super-linter.yml 2025-05-23 00:54:04 +02:00
Ralf Vogler
5d48716ef1 docker: GitHub doesn't show labels due to multi-arch image -> add annotation level index 2025-05-22 23:52:23 +02:00
Ralf Vogler
ada40d05ec docker: use metadata-action for tags and labels
https://github.com/docker/metadata-action
Packages on GitHub lack description since labels from Dockerfile are not used:
https://github.com/vogler/free-games-claimer/pkgs/container/free-games-claimer/421753259
2025-05-22 23:26:11 +02:00
Ralf Vogler
1dbbfaf3ad lint: fix most super-linter errors 2025-05-16 02:07:40 +02:00
Ralf Vogler
99c1f05302 Merge branch 'dev' 2025-05-16 00:15:45 +02:00
Ralf Vogler
991e0a1449 docker: only build branches main, dev
Otherwise branches will accumulate in 'Recent tagged image version'
https://github.com/vogler/free-games-claimer/pkgs/container/free-games-claimer
2025-05-16 00:14:10 +02:00
Ralf Vogler
158caa6164
Merge pull request #469 from vogler/renovate/super-linter-super-linter-7.x 2025-05-16 00:01:31 +02:00
Ralf Vogler
bf0c9032cc need 'packages: write' permission for ghcr.io 2025-05-14 01:59:37 +02:00
Ralf Vogler
4ce0d44b79 can't check secrets in if expr... 2025-05-14 01:44:14 +02:00
Ralf Vogler
7c8682ac91 build docker image for each branch/PR? 2025-05-14 01:31:04 +02:00
Ralf Vogler
a5ce5ec816 fix CodeQL alerts 5-7
https://github.com/vogler/free-games-claimer/security/code-scanning/5
https://github.com/vogler/free-games-claimer/security/code-scanning/6
https://github.com/vogler/free-games-claimer/security/code-scanning/7
2025-05-14 00:46:37 +02:00
renovate[bot]
3e13e9fba8
chore(deps): update super-linter/super-linter action to v7.4.0 2025-05-13 20:29:21 +00:00
Ralf Vogler
8b7018f54c fix actionlint errors (docker.yml)
Double quote to prevent globbing and word splitting
2025-03-27 16:26:40 +01:00
renovate[bot]
e75975b273
chore(deps): update docker/build-push-action action to v6 2025-03-05 14:54:01 +00:00
Ralf Vogler
6aa0f9b817 super-linter: problem matchers included? 2025-03-05 15:34:03 +01:00
Ralf Vogler
bf2216f731 super-linter: TODO fix-lint-issues 2025-03-05 15:27:00 +01:00
Ralf Vogler
d6666aed03 super-linter: use slim version 2025-03-05 15:17:34 +01:00
Ralf Vogler
fed03428f3 try super-linter
https://github.com/marketplace/actions/super-linter#get-started
2025-03-05 15:07:37 +01:00
Ralf Vogler
23a611a2f1 ci/docker: fix: tag main as latest 2024-08-02 13:19:39 +02:00
Ralf Vogler
eac11e8949 ci/docker: force tag main as latest since many people pull it 2024-08-02 13:06:28 +02:00
dependabot[bot]
324f6bffe7
build(deps): bump actions/setup-node from 3 to 4
Bumps [actions/setup-node](https://github.com/actions/setup-node) from 3 to 4.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-11-13 06:01:59 +00:00
Ralf Vogler
c5f75e06c8 gha: sonar: disable shallow clone (irrelevant) to get rid of warning 2023-11-08 01:36:35 +01:00
Ralf Vogler
d4685ff370 gha: sonar: install dev deps for eslint plugins 2023-11-08 01:32:20 +01:00
Ralf Vogler
6a34cb541d format sonar.yml 2023-11-07 18:03:54 +01:00
Ralf Vogler
6113ea4b8d
Merge branch 'main' into ci 2023-11-07 17:32:00 +01:00
Ralf Vogler
e192365b48 can't have comment in yml list? 2023-11-07 11:39:08 +01:00
Ralf Vogler
92ce3d405d run docker workflow if its defition changed 2023-11-07 11:36:17 +01:00
Ralf Vogler
584130f5d1 edits for #229, build image for PRs from forks? 2023-11-07 11:31:14 +01:00
4n4n4s
1dbe2f1457 Allow forks to create builds and fix failing build 2023-10-27 11:37:32 +00:00
4n4n4s
0040d9d96c Sonarqube support with ESLint 2023-09-26 19:12:09 +00:00
dependabot[bot]
2a4da3f49c
build(deps): bump docker/build-push-action from 4 to 5 (#212)
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 4 to 5.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](https://github.com/docker/build-push-action/compare/v4...v5)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 09:51:53 +02:00
dependabot[bot]
0ba693eeb6
build(deps): bump docker/login-action from 2 to 3 (#214)
Bumps [docker/login-action](https://github.com/docker/login-action) from 2 to 3.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 09:51:23 +02:00
dependabot[bot]
6cdef56c09
build(deps): bump docker/setup-buildx-action from 2 to 3 (#213)
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 2 to 3.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](https://github.com/docker/setup-buildx-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 09:50:04 +02:00
dependabot[bot]
30db49d9b9
build(deps): bump docker/setup-qemu-action from 2 to 3 (#215)
Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 2 to 3.
- [Release notes](https://github.com/docker/setup-qemu-action/releases)
- [Commits](https://github.com/docker/setup-qemu-action/compare/v2...v3)

---
updated-dependencies:
- dependency-name: docker/setup-qemu-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-18 09:49:00 +02:00
dependabot[bot]
44d712e333
build(deps): bump actions/checkout from 3 to 4 (#207)
Bumps [actions/checkout](https://github.com/actions/checkout) from 3 to 4.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v3...v4)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-11 09:41:42 +02:00
Ralf Vogler
c211472d0c docker: try GitHub Actions cache
https://docs.docker.com/build/ci/github-actions/cache/#github-cache
2023-08-27 23:59:30 +02:00
Ralf Vogler
f528fbfd30 docker: more human-readable format for date $NOW 2023-08-27 23:41:19 +02:00
Ralf Vogler
d7949fb9dd can't use secrets in if of workflow step? 2023-08-27 23:39:52 +02:00
Ralf Vogler
8a010dbcc7 docker: pass in build-args, add $NOW 2023-08-27 23:32:56 +02:00