mirror of
https://github.com/ivuorinen/gh-action-readme.git
synced 2026-03-03 03:56:05 +00:00
feat: add comprehensive security scanning and EditorConfig integration
- Add govulncheck, Snyk, and Trivy vulnerability scanning - Create security workflow for automated scanning on push/PR/schedule - Add gitleaks for secrets detection and prevention - Implement EditorConfig linting with eclint and editorconfig-checker - Update Makefile with security and formatting targets - Create SECURITY.md with vulnerability reporting guidelines - Configure Dependabot for automated dependency updates - Fix all EditorConfig violations across codebase - Update Go version to 1.23.10 to address stdlib vulnerabilities - Add tests for internal/helpers package (80% coverage) - Remove deprecated functions and migrate to error-returning patterns - Fix YAML indentation in test fixtures to resolve test failures
This commit is contained in:
66
.github/dependabot.yml
vendored
Normal file
66
.github/dependabot.yml
vendored
Normal file
@@ -0,0 +1,66 @@
|
||||
version: 2
|
||||
|
||||
updates:
|
||||
# Go modules
|
||||
- package-ecosystem: "gomod"
|
||||
directory: "/"
|
||||
schedule:
|
||||
interval: "weekly"
|
||||
day: "monday"
|
||||
time: "06:00"
|
||||
open-pull-requests-limit: 10
|
||||
reviewers:
|
||||
- "ivuorinen"
|
||||
assignees:
|
||||
- "ivuorinen"
|
||||
commit-message:
|
||||
prefix: "chore(deps)"
|
||||
include: "scope"
|
||||
labels:
|
||||
- "dependencies"
|
||||
- "security"
|
||||
# Group security updates
|
||||
groups:
|
||||
security-updates:
|
||||
patterns:
|
||||
- "*"
|
||||
update-types:
|
||||
- "security-update"
|
||||
|
||||
# GitHub Actions
|
||||
- package-ecosystem: "github-actions"
|
||||
directory: "/"
|
||||
schedule:
|
||||
interval: "weekly"
|
||||
day: "monday"
|
||||
time: "06:00"
|
||||
open-pull-requests-limit: 5
|
||||
reviewers:
|
||||
- "ivuorinen"
|
||||
assignees:
|
||||
- "ivuorinen"
|
||||
commit-message:
|
||||
prefix: "fix(github-action)"
|
||||
include: "scope"
|
||||
labels:
|
||||
- "dependencies"
|
||||
- "github-actions"
|
||||
|
||||
# Docker
|
||||
- package-ecosystem: "docker"
|
||||
directory: "/"
|
||||
schedule:
|
||||
interval: "weekly"
|
||||
day: "monday"
|
||||
time: "06:00"
|
||||
open-pull-requests-limit: 3
|
||||
reviewers:
|
||||
- "ivuorinen"
|
||||
assignees:
|
||||
- "ivuorinen"
|
||||
commit-message:
|
||||
prefix: "fix(docker)"
|
||||
include: "scope"
|
||||
labels:
|
||||
- "dependencies"
|
||||
- "docker"
|
||||
Reference in New Issue
Block a user