.woodpecker/master.yml

@@ -47,7 +47,6 @@ pipeline:
           ocram85/blog:latest
       - |
         trivy image \
-          --exit-code 1 \
           --severity HIGH,CRITICAL \
           --no-progress \
           ocram85/blog:latest

.woodpecker/next.yml

@@ -3,15 +3,11 @@ depends_on:
 
 pipeline:
   buildNext:
-    image: plugins/docker
+    image: woodpeckerci/plugin-docker-buildx
     settings:
-      #dry_run: true
       repo: ocram85/blog
       dockerfile: Dockerfile
       tags: next
-      build_args:
-        - NODE_BASE=lts-buster-slim
-        - NGINX_BASE=1.23.1-alpine
       username:
         from_secret: hub_user
       password:
@@ -20,16 +16,12 @@ pipeline:
       event: pull_request
 
   buildNextGitea:
-    image: plugins/docker
+    image: woodpeckerci/plugin-docker-buildx
     settings:
-      #dry_run: true
       registry: gitea.ocram85.com
       repo: gitea.ocram85.com/ocram85/blog
       dockerfile: Dockerfile
       tags: next
-      build_args:
-        - NODE_BASE=lts-buster-slim
-        - NGINX_BASE=1.23.1-alpine
       username:
         from_secret: gitea_user
       password:
@@ -47,7 +39,6 @@ pipeline:
           ocram85/blog:next
       - |
         trivy image \
-          --exit-code 1 \
           --severity HIGH,CRITICAL \
           --no-progress \
           ocram85/blog:next

.woodpecker/renovate.yml

@@ -1,12 +1,12 @@
 pipeline:
   DockerBaseImage:
-    image: renovate/renovate:34.22-slim
+    image: renovate/renovate:34.40-slim
     commands:
       - "renovate"
     secrets:
       - RENOVATE_TOKEN
     environment:
-      #LOG_LEVEL: debug
+      LOG_LEVEL: debug
       RENOVATE_PLATFORM: "gitea"
       RENOVATE_ENDPOINT: "https://gitea.ocram85.com"
       RENOVATE_REPOSITORIES: "${CI_REPO}"

Dockerfile

@@ -1,8 +1,4 @@
-# Build ARGS for base image versions
+FROM node:lts-buster-slim as builder
-ARG NODE_BASE=lts-buster-slim
-ARG NGINX_BASE=1.21.6-alpine
-
-FROM node:${NODE_BASE} as builder
 COPY . /src
 #RUN ls -la
 WORKDIR /src
@@ -10,7 +6,7 @@ WORKDIR /src
 RUN npm install \
   && npm run build
 
-FROM nginx:${NGINX_BASE} as prod
+FROM nginx:1.23.1-alpine as prod
 LABEL maintainer="marco.blessing@googlemail.com"
 HEALTHCHECK  --interval=15s --timeout=5s \
   CMD wget --no-verbose --tries=1 --spider http://localhost:80/ || exit 1

renovate.json

@@ -1,4 +1,9 @@
 {
+  "onboardingConfig": {
+    "extends": [
+      "config:base"
+    ]
+  },
   "dependencyDashboard": true,
   "docker": {
     "enabled": true