mirror of
https://github.com/k3s-io/k3s.git
synced 2026-04-06 18:05:05 -04:00
71 lines
1.8 KiB
YAML
71 lines
1.8 KiB
YAML
---
|
|
name: "Bump Trivy version"
|
|
scms:
|
|
k3s:
|
|
kind: "github"
|
|
spec:
|
|
user: "{{ .github.user }}"
|
|
email: "{{ .github.email }}"
|
|
username: "{{ .github.username }}"
|
|
token: "{{ requiredEnv .github.token }}"
|
|
owner: "{{ .k3s.org }}"
|
|
repository: "{{ .k3s.repo }}"
|
|
branch: "{{ .k3s.branch }}"
|
|
commitmessage:
|
|
title: "Bump Trivy version"
|
|
|
|
actions:
|
|
github:
|
|
title: "Bump Trivy version"
|
|
kind: "github/pullrequest"
|
|
scmid: "k3s"
|
|
spec:
|
|
automerge: false
|
|
mergemethod: "squash"
|
|
usetitleforautomerge: true
|
|
labels:
|
|
- "dependencies"
|
|
|
|
sources:
|
|
trivy-release:
|
|
name: "Get Trivy latest release"
|
|
kind: "githubrelease"
|
|
spec:
|
|
owner: "aquasecurity"
|
|
repository: "trivy"
|
|
token: "{{ requiredEnv .github.token }}"
|
|
versionfilter:
|
|
kind: "regex"
|
|
pattern: "^v\\d+\\.\\d+\\.\\d+$" # Matches "vMajor.Minor.Patch"
|
|
transformers:
|
|
- trimprefix: "v"
|
|
|
|
conditions:
|
|
trivy-version:
|
|
name: "Check Trivy usage in Dockerfile.dapper"
|
|
kind: "file"
|
|
scmid: "k3s"
|
|
disablesourceinput: true
|
|
spec:
|
|
file: "Dockerfile.dapper"
|
|
matchpattern: 'TRIVY_VERSION="\d+\.\d+\.\d+"'
|
|
trivy-minor-changed:
|
|
name: "Only update when Trivy major.minor changed"
|
|
kind: "shell"
|
|
sourceid: "trivy-release"
|
|
transformers:
|
|
- find: '\d+\.\d+'
|
|
spec:
|
|
command: 'current=$(sed -n -E ''s/^ENV TRIVY_VERSION="([0-9]+\.[0-9]+)\.[0-9]+"$/\1/p'' Dockerfile.dapper); test "$current" !='
|
|
|
|
targets:
|
|
trivy-version:
|
|
name: "Update Trivy version in Dockerfile.dapper"
|
|
kind: "file"
|
|
scmid: "k3s"
|
|
disablesourceinput: true
|
|
spec:
|
|
file: "Dockerfile.dapper"
|
|
matchpattern: 'TRIVY_VERSION="\d+\.\d+\.\d+"'
|
|
replacepattern: 'TRIVY_VERSION="{{ source `trivy-release` }}"'
|
|
|