6 Commits

Author SHA1 Message Date
JonKazama-Hellion 0d4708bf11 chore(config): migrate Renovate config (#3)
Security / scan (push) Successful in 27s
Auto-merge: Renovate config migration (matchPackagePrefixes -> matchPackageNames).
2026-05-09 15:46:45 +00:00
renovate-bot f2b070e201 chore(config): migrate config renovate.json
Security / scan (pull_request) Successful in 24s
2026-05-09 15:41:56 +00:00
JonKazama-Hellion 8176f91d4c Merge pull request 'chore: Configure Renovate' (#1) from renovate/configure into master
Security / scan (push) Successful in 17s
Reviewed-on: #1
2026-05-09 10:32:11 +00:00
JonKazama-Hellion d68bb35e7a renovate.json aktualisiert
Signed-off-by: Jon Kazama <kontakt@hellion-media.de>
2026-05-09 10:32:11 +00:00
renovate-bot 10c70f8bf9 Add renovate.json 2026-05-09 10:32:11 +00:00
JonKazama-Hellion 28b9061756 chore: add reusable security scan workflow
Security / scan (push) Failing after 11s
Calls JonKazama-Hellion/security-workflows for Semgrep SAST + Trivy
filesystem vulnerability scan. Runs on push to main/master, on every
PR, and weekly Monday 06:00 UTC.
2026-05-09 11:28:10 +02:00
2 changed files with 18 additions and 3 deletions
+13
View File
@@ -0,0 +1,13 @@
name: Security
on:
push:
branches: [main, master]
pull_request:
schedule:
- cron: '0 6 * * 1'
workflow_dispatch:
jobs:
scan:
uses: JonKazama-Hellion/security-workflows/.gitea/workflows/security-scan.yml@main
+4 -2
View File
@@ -26,8 +26,10 @@
}, },
{ {
"description": "TypeScript type definitions stay grouped with each other", "description": "TypeScript type definitions stay grouped with each other",
"matchPackagePrefixes": ["@types/"], "groupName": "type definitions",
"groupName": "type definitions" "matchPackageNames": [
"@types/{/,}**"
]
}, },
{ {
"description": "Dev dependencies in their own group", "description": "Dev dependencies in their own group",