mirror of
https://github.com/ivuorinen/gh-action-readme.git
synced 2026-02-05 13:45:29 +00:00
Ismo Vuorinen
ce02d36929
- Add govulncheck, Snyk, and Trivy vulnerability scanning - Create security workflow for automated scanning on push/PR/schedule - Add gitleaks for secrets detection and prevention - Implement EditorConfig linting with eclint and editorconfig-checker - Update Makefile with security and formatting targets - Create SECURITY.md with vulnerability reporting guidelines - Configure Dependabot for automated dependency updates - Fix all EditorConfig violations across codebase - Update Go version to 1.23.10 to address stdlib vulnerabilities - Add tests for internal/helpers package (80% coverage) - Remove deprecated functions and migrate to error-returning patterns - Fix YAML indentation in test fixtures to resolve test failures
67 lines
1.3 KiB
YAML
67 lines
1.3 KiB
YAML
version: 2
|
|
|
|
updates:
|
|
# Go modules
|
|
- package-ecosystem: "gomod"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
time: "06:00"
|
|
open-pull-requests-limit: 10
|
|
reviewers:
|
|
- "ivuorinen"
|
|
assignees:
|
|
- "ivuorinen"
|
|
commit-message:
|
|
prefix: "chore(deps)"
|
|
include: "scope"
|
|
labels:
|
|
- "dependencies"
|
|
- "security"
|
|
# Group security updates
|
|
groups:
|
|
security-updates:
|
|
patterns:
|
|
- "*"
|
|
update-types:
|
|
- "security-update"
|
|
|
|
# GitHub Actions
|
|
- package-ecosystem: "github-actions"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
time: "06:00"
|
|
open-pull-requests-limit: 5
|
|
reviewers:
|
|
- "ivuorinen"
|
|
assignees:
|
|
- "ivuorinen"
|
|
commit-message:
|
|
prefix: "fix(github-action)"
|
|
include: "scope"
|
|
labels:
|
|
- "dependencies"
|
|
- "github-actions"
|
|
|
|
# Docker
|
|
- package-ecosystem: "docker"
|
|
directory: "/"
|
|
schedule:
|
|
interval: "weekly"
|
|
day: "monday"
|
|
time: "06:00"
|
|
open-pull-requests-limit: 3
|
|
reviewers:
|
|
- "ivuorinen"
|
|
assignees:
|
|
- "ivuorinen"
|
|
commit-message:
|
|
prefix: "fix(docker)"
|
|
include: "scope"
|
|
labels:
|
|
- "dependencies"
|
|
- "docker"
|