mirror of
https://github.com/vee1e/KubeArmor.git
synced 2026-09-01 10:18:29 +00:00
e46f112e8b
* pin Dockerfile base images and GitHub Actions to SHA256 digests for Pinned-Dependencies scorecard Signed-off-by: asmit27rai <raiasmit10@gmail.com> * pin remaining container images, go commands and downloadThenRun Signed-off-by: asmit27rai <raiasmit10@gmail.com> * replace curl|sh with download-then-run and pin go commands for Pinned-Dependencies Signed-off-by: asmit27rai <raiasmit10@gmail.com> * pin remaining downloadThenrun Signed-off-by: asmit27rai <raiasmit10@gmail.com> * replace wget|bash with apt-get install in llvm Signed-off-by: asmit27rai <raiasmit10@gmail.com> * replace wget|bash llvm with apt-get install Signed-off-by: asmit27rai <raiasmit10@gmail.com> * fix renovate.json Signed-off-by: asmit27rai <raiasmit10@gmail.com> * removed deduplication Signed-off-by: asmit27rai <raiasmit10@gmail.com> * remove redundant pip install, flask already installed via apt Signed-off-by: asmit27rai <raiasmit10@gmail.com> * use pseudo-version for modocache/gover instead of bare commit SHA Signed-off-by: asmit27rai <raiasmit10@gmail.com> * changed the sha to use go:1.26.5 Signed-off-by: asmit27rai <raiasmit10@gmail.com> * correction Signed-off-by: asmit27rai <raiasmit10@gmail.com> * revert protoc-gen-go package Signed-off-by: asmit27rai <raiasmit10@gmail.com> --------- Signed-off-by: asmit27rai <raiasmit10@gmail.com>
53 lines
No EOL
1.1 KiB
JSON
53 lines
No EOL
1.1 KiB
JSON
{
|
|
"$schema": "https://docs.renovatebot.com/renovate-schema.json",
|
|
"extends": [
|
|
"config:recommended",
|
|
"helpers:pinGitHubActionDigests"
|
|
],
|
|
"dependencyDashboard": true,
|
|
"schedule": [
|
|
"before 4am on monday"
|
|
],
|
|
"prHourlyLimit": 0,
|
|
"prConcurrentLimit": 10,
|
|
"docker": {
|
|
"pinDigests": true
|
|
},
|
|
"packageRules": [
|
|
{
|
|
"description": "Group all GitHub Actions digest-pin updates into one PR",
|
|
"matchManagers": [
|
|
"github-actions"
|
|
],
|
|
"matchUpdateTypes": [
|
|
"pin",
|
|
"digest"
|
|
],
|
|
"groupName": "GitHub Actions digest pins",
|
|
"automerge": false
|
|
},
|
|
{
|
|
"description": "Group all Docker digest-pin updates into one PR",
|
|
"matchManagers": [
|
|
"dockerfile"
|
|
],
|
|
"matchUpdateTypes": [
|
|
"pin",
|
|
"digest"
|
|
],
|
|
"groupName": "Docker image digest pins",
|
|
"automerge": false
|
|
}
|
|
],
|
|
"postUpdateOptions": [
|
|
"gomodTidy"
|
|
],
|
|
"ignorePresets": [
|
|
":prHourlyLimit2"
|
|
],
|
|
"reviewers": [
|
|
"team:maintainers"
|
|
],
|
|
"pinDigests": true,
|
|
"osvVulnerabilityAlerts": true
|
|
} |