Compare commits

..

7 Commits

Author SHA1 Message Date
renovate-bot a94d765cca chore(deps): update actions/checkout action to v6
Security / scan (pull_request) Successful in 33s
2026-05-10 12:33:06 +00:00
JonKazama-Hellion 0d4708bf11 chore(config): migrate Renovate config (#3)
Security / scan (push) Successful in 27s
Auto-merge: Renovate config migration (matchPackagePrefixes -> matchPackageNames).
2026-05-09 15:46:45 +00:00
renovate-bot f2b070e201 chore(config): migrate config renovate.json
Security / scan (pull_request) Successful in 24s
2026-05-09 15:41:56 +00:00
JonKazama-Hellion 8176f91d4c Merge pull request 'chore: Configure Renovate' (#1) from renovate/configure into master
Security / scan (push) Successful in 17s
Reviewed-on: #1
2026-05-09 10:32:11 +00:00
JonKazama-Hellion d68bb35e7a renovate.json aktualisiert
Signed-off-by: Jon Kazama <kontakt@hellion-media.de>
2026-05-09 10:32:11 +00:00
renovate-bot 10c70f8bf9 Add renovate.json 2026-05-09 10:32:11 +00:00
JonKazama-Hellion 28b9061756 chore: add reusable security scan workflow
Security / scan (push) Failing after 11s
Calls JonKazama-Hellion/security-workflows for Semgrep SAST + Trivy
filesystem vulnerability scan. Runs on push to main/master, on every
PR, and weekly Monday 06:00 UTC.
2026-05-09 11:28:10 +02:00
5 changed files with 22 additions and 7 deletions
+13
View File
@@ -0,0 +1,13 @@
name: Security
on:
push:
branches: [main, master]
pull_request:
schedule:
- cron: '0 6 * * 1'
workflow_dispatch:
jobs:
scan:
uses: JonKazama-Hellion/security-workflows/.gitea/workflows/security-scan.yml@main
+1 -1
View File
@@ -16,7 +16,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- name: Projektstruktur prüfen - name: Projektstruktur prüfen
run: | run: |
+1 -1
View File
@@ -15,7 +15,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- name: Extract version from tag - name: Extract version from tag
id: version id: version
+2 -2
View File
@@ -20,7 +20,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- name: Initialize CodeQL - name: Initialize CodeQL
uses: github/codeql-action/init@v3 uses: github/codeql-action/init@v3
@@ -36,7 +36,7 @@ jobs:
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4 uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
- name: Dependency Review - name: Dependency Review
uses: actions/dependency-review-action@v4 uses: actions/dependency-review-action@v4
+5 -3
View File
@@ -26,8 +26,10 @@
}, },
{ {
"description": "TypeScript type definitions stay grouped with each other", "description": "TypeScript type definitions stay grouped with each other",
"matchPackagePrefixes": ["@types/"], "groupName": "type definitions",
"groupName": "type definitions" "matchPackageNames": [
"@types/{/,}**"
]
}, },
{ {
"description": "Dev dependencies in their own group", "description": "Dev dependencies in their own group",
@@ -51,4 +53,4 @@
"commitMessageAction": "Refresh" "commitMessageAction": "Refresh"
}, },
"osvVulnerabilityAlerts": true "osvVulnerabilityAlerts": true
} }