Matthew Baggett
6db6395f66
* linting is fun * mis-detection of missing healthcheck staements. * typo * disable tagging vanity tags on non-main branch * Unbugger node build? * Add gitleaks detector, remove an expired secret. * More linting-derived cleanup * Fiddle with trivy * Fiddle with trivy * add a readme * Fix build bug with php flavours * Marshall should build other flavours of ubuntu. * Fiddle with act cache location. * Add concurrency checks * Composer version gubbins for 7.0/7.1 * ubuntu is just a label, and injected over the top of. * Composer version gubbins for 7.0/7.1 * Run when workflow is altered too please. * Hopefully fix composer stage. * setup tooling meta-tooling. * Add trunk * Disable mirror mode, its being problematic, and increase retries to 5. * Revisit how ghcr login works. * Add trunk checks. * All hail the linter * Heavilly revise workflow * Fettling * Fettling * Fettling * Fettling * Fettling * Cleanup * Cleanup * Fettling.. Why does mitm build but not redis? * Fettling.. Why does mitm build but not redis? * Debuggin * Fettling. * Fix build? * Permissions are a pain * Switch around some should_push logic because envs aren't available that early. * Permissionssssss * Trivy, bane of my life * Fix merge? * Fix labels * Help node along, among other things * Redis 6.1 & 7.1 aren't a thing any more. * Ffff USER nonsense * latest-openssl doesn't exist. * fixup mysqlproxy. * Fix labels * uurrgh * uurrgh * Didn't need to add the mitmproxy user, it exists * Missing ghcr login * Missing backtick * Fix build? * Add validate build step to bouncer. * Fix bouncer build * Disable laravel build * Missing env * Fix swarm mon build * Scout just doesn't seem to work.
96 lines
2.5 KiB
YAML
96 lines
2.5 KiB
YAML
# This file controls the behavior of Trunk: https://docs.trunk.io/cli
|
|
# To learn more about the format of this file, see https://docs.trunk.io/reference/trunk-yaml
|
|
version: 0.1
|
|
cli:
|
|
version: 1.19.0
|
|
shell_hooks:
|
|
enforce: true
|
|
# Trunk provides extensibility via plugins. (https://docs.trunk.io/plugins)
|
|
plugins:
|
|
sources:
|
|
- id: trunk
|
|
ref: v1.4.2
|
|
uri: https://github.com/trunk-io/plugins
|
|
# Many linters and tools depend on runtimes - configure them here. (https://docs.trunk.io/runtimes)
|
|
runtimes:
|
|
enabled:
|
|
- go@1.21.0
|
|
- node@18.12.1
|
|
- python@3.10.8
|
|
# This is the section where you manage your linters. (https://docs.trunk.io/check/configuration)
|
|
lint:
|
|
disabled:
|
|
- terrascan
|
|
enabled:
|
|
- gitleaks@8.18.1
|
|
- actionlint@1.6.26
|
|
- checkov@3.2.2
|
|
- git-diff-check
|
|
- hadolint@2.12.0
|
|
- markdownlint@0.39.0
|
|
- osv-scanner@1.6.2
|
|
- prettier@3.2.4
|
|
- shellcheck@0.9.0
|
|
- shfmt@3.6.0
|
|
- trivy@0.48.3
|
|
- trufflehog@3.66.2
|
|
- yamllint@1.33.0
|
|
ignore:
|
|
- linters: [markdownlint]
|
|
paths:
|
|
- "**/LICENCE.md"
|
|
- "**/LICENSE.md"
|
|
- "**/CODE_OF_CONDUCT.md"
|
|
actions:
|
|
enabled:
|
|
- trunk-announce
|
|
- trunk-check-pre-push
|
|
- trunk-fmt-pre-commit
|
|
- trunk-upgrade-available
|
|
tools:
|
|
enabled:
|
|
- jq@jq-1.7.1
|
|
- gh@2.43.1
|
|
- act@0.2.59
|
|
- terraform@1.7.2
|
|
definitions:
|
|
- name: gh
|
|
download: gh
|
|
known_good_version: 2.27.0
|
|
environment:
|
|
- name: PATH
|
|
list: ["${tool}/bin"]
|
|
shims: [gh]
|
|
downloads:
|
|
- name: gh
|
|
downloads:
|
|
- os:
|
|
linux: linux
|
|
cpu:
|
|
x86_64: amd64
|
|
arm_64: arm64
|
|
url: https://github.com/cli/cli/releases/download/v${version}/gh_${version}_${os}_${cpu}.tar.gz
|
|
strip_components: 1
|
|
- os:
|
|
windows: windows
|
|
cpu:
|
|
x86_64: amd64
|
|
arm_64: arm64
|
|
url: https://github.com/cli/cli/releases/download/v${version}/gh_${version}_${os}_${cpu}.zip
|
|
strip_components: 1
|
|
# macOS releases since 2.28.0 started using .zip instead of .tar.gz
|
|
- os:
|
|
macos: macOS
|
|
cpu:
|
|
x86_64: amd64
|
|
arm_64: arm64
|
|
url: https://github.com/cli/cli/releases/download/v${version}/gh_${version}_${os}_${cpu}.zip
|
|
strip_components: 1
|
|
version: ">=2.28.0"
|
|
- os:
|
|
macos: macOS
|
|
cpu:
|
|
x86_64: amd64
|
|
arm_64: arm64
|
|
url: https://github.com/cli/cli/releases/download/v${version}/gh_${version}_${os}_${cpu}.tar.gz
|
|
strip_components: 1
|