Blog/.woodpecker/master.yml
CI-Bot 4e1020e279
All checks were successful
ci/woodpecker/push/test Pipeline was successful
ci/woodpecker/push/next Pipeline was successful
ci/woodpecker/push/renovate Pipeline was successful
ci/woodpecker/push/master Pipeline was successful
Update aquasec/trivy Docker tag to v0.36.1 (#44)
This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [aquasec/trivy](https://github.com/aquasecurity/trivy) | minor | `0.35.0` -> `0.36.1` |

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC42My4yIiwidXBkYXRlZEluVmVyIjoiMzQuNjMuMiJ9-->

Reviewed-on: #44
Co-authored-by: CI-Bot <noreply@ocram85.com>
Co-committed-by: CI-Bot <noreply@ocram85.com>
2023-01-22 13:13:40 +01:00

67 lines
1.4 KiB
YAML

depends_on:
- test
pipeline:
buildMaster:
image: plugins/docker
settings:
repo: ocram85/blog
dockerfile: Dockerfile
auto_tag: true
build_args:
- NODE_BASE=lts-buster-slim
- NGINX_BASE=1.23.1-alpine
username:
from_secret: hub_user
password:
from_secret: hub_passwd
when:
event: push
branch: master
buildMasterGitea:
image: plugins/docker
settings:
registry: gitea.ocram85.com
repo: gitea.ocram85.com/ocram85/blog
dockerfile: Dockerfile
auto_tag: true
build_args:
- NODE_BASE=lts-buster-slim
- NGINX_BASE=1.23.1-alpine
username:
from_secret: gitea_user
password:
from_secret: gitea_passwd
when:
event: push
branch: master
trivyMaster:
image: aquasec/trivy:0.36.1
commands:
- |
trivy image \
--severity UNKNOWN,LOW,MEDIUM \
--no-progress \
ocram85/blog:latest
- |
trivy image \
--severity HIGH,CRITICAL \
--no-progress \
ocram85/blog:latest
when:
event: push
branch: master
triggerPortainerMaster:
image: ocram85/portainer-serviceupdate
settings:
#VERBOSE: true
URI: "https://portainer.ocram85.com"
TOKEN:
from_secret: TOKEN
when:
event: push
branch: master