chore(deps): update docker.io/plugins/docker docker tag to v20.17.4

chore(deps): update docker.io/library/golang docker tag to v1.22.3
chore(deps): update git.cryptic.systems/volker.raschek/markdownlint docker tag to v0.40.0
2024-05-13 10:12:40 +00:00 · 2024-05-08 00:51:49 +00:00 · 2024-05-07 22:27:47 +00:00 · 2024-04-03 19:49:33 +00:00 · 2024-03-31 16:10:17 +00:00 · 2024-03-11 08:21:46 +00:00
5 changed files with 381 additions and 434 deletions
--- a/.drone.yml
+++ b/.drone.yml
--- a/2
+++ b/2
@ -1,4 +1,4 @@
-FROM docker.io/library/golang:1.18.1-alpine AS build
+FROM docker.io/library/golang:1.22.3-alpine AS build

 ARG GOSEC_VERSION

--- a/30
+++ b/30
@ -1,22 +1,22 @@
 # GOSEC_VERSION
 # Only required to install a specifiy version
-GOSEC_VERSION?=v2.11.0 # renovate: datasource=github-releases depName=securego/gosec
+GOSEC_VERSION?=v2.19.0 # renovate: datasource=github-releases depName=securego/gosec

 # CONTAINER_RUNTIME
 # The CONTAINER_RUNTIME variable will be used to specified the path to a
 # container runtime. This is needed to start and run a container image.
-CONTAINER_RUNTIME?=$(shell which docker)
+CONTAINER_RUNTIME?=$(shell which podman)

-# HELM_IMAGE_REGISTRY_NAME
+# GOSEC_IMAGE_REGISTRY_NAME
 # Defines the name of the new container to be built using several variables.
-HELM_IMAGE_REGISTRY_NAME:=docker.io
-HELM_IMAGE_REGISTRY_USER:=volkerraschek
+GOSEC_IMAGE_REGISTRY_NAME:=git.cryptic.systems
+GOSEC_IMAGE_REGISTRY_USER:=volker.raschek

-HELM_IMAGE_NAMESPACE?=${HELM_IMAGE_REGISTRY_USER}
-HELM_IMAGE_NAME:=gosec
-HELM_IMAGE_VERSION?=latest
-HELM_IMAGE_FULLY_QUALIFIED=${HELM_IMAGE_REGISTRY_NAME}/${HELM_IMAGE_NAMESPACE}/${HELM_IMAGE_NAME}:${HELM_IMAGE_VERSION}
-HELM_IMAGE_UNQUALIFIED=${HELM_IMAGE_NAMESPACE}/${HELM_IMAGE_NAME}:${HELM_IMAGE_VERSION}
+GOSEC_IMAGE_NAMESPACE?=${GOSEC_IMAGE_REGISTRY_USER}
+GOSEC_IMAGE_NAME:=gosec
+GOSEC_IMAGE_VERSION?=latest
+GOSEC_IMAGE_FULLY_QUALIFIED=${GOSEC_IMAGE_REGISTRY_NAME}/${GOSEC_IMAGE_NAMESPACE}/${GOSEC_IMAGE_NAME}:${GOSEC_IMAGE_VERSION}
+GOSEC_IMAGE_UNQUALIFIED=${GOSEC_IMAGE_NAMESPACE}/${GOSEC_IMAGE_NAME}:${GOSEC_IMAGE_VERSION}

 # BUILD CONTAINER IMAGE
 # ==============================================================================
@ -27,23 +27,23 @@ container-image/build:
 		--file Dockerfile \
 		--no-cache \
 		--pull \
-		--tag ${HELM_IMAGE_FULLY_QUALIFIED} \
-		--tag ${HELM_IMAGE_UNQUALIFIED} \
+		--tag ${GOSEC_IMAGE_FULLY_QUALIFIED} \
+		--tag ${GOSEC_IMAGE_UNQUALIFIED} \
 		.

 # DELETE CONTAINER IMAGE
 # ==============================================================================
 PHONY:=container-image/delete
 container-image/delete:
-	- ${CONTAINER_RUNTIME} image rm ${HELM_IMAGE_FULLY_QUALIFIED} ${HELM_IMAGE_UNQUALIFIED}
+	- ${CONTAINER_RUNTIME} image rm ${GOSEC_IMAGE_FULLY_QUALIFIED} ${GOSEC_IMAGE_UNQUALIFIED}
 	- ${CONTAINER_RUNTIME} image rm ${BASE_IMAGE_FULL}

 # PUSH CONTAINER IMAGE
 # ==============================================================================
 PHONY+=container-image/push
 container-image/push:
-	echo ${HELM_IMAGE_REGISTRY_PASSWORD} | ${CONTAINER_RUNTIME} login ${HELM_IMAGE_REGISTRY_NAME} --username ${HELM_IMAGE_REGISTRY_USER} --password-stdin
-	${CONTAINER_RUNTIME} push ${HELM_IMAGE_FULLY_QUALIFIED}
+	echo ${GOSEC_IMAGE_REGISTRY_PASSWORD} | ${CONTAINER_RUNTIME} login ${GOSEC_IMAGE_REGISTRY_NAME} --username ${GOSEC_IMAGE_REGISTRY_USER} --password-stdin
+	${CONTAINER_RUNTIME} push ${GOSEC_IMAGE_FULLY_QUALIFIED}

 # PHONY
 # ==============================================================================
--- a/manifest.tmpl
+++ b/manifest.tmpl
@ -1,4 +1,4 @@
-image: volkerraschek/gosec:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}
+image: git.cryptic.systems/volker.raschek/gosec:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}
 {{#if build.tags}}
 tags:
 {{#each build.tags}}
@ -7,19 +7,11 @@ tags:
  - "latest"
 {{/if}}
 manifests:
-  -
-    image: volkerraschek/gosec:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-amd64
+  - image: git.cryptic.systems/volker.raschek/gosec:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-amd64
    platform:
      architecture: amd64
      os: linux
-  -
-    image: volkerraschek/gosec:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-arm-v7
-    platform:
-      architecture: arm
-      os: linux
-      variant: v7
-  -
-    image: volkerraschek/gosec:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-arm64-v8
+  - image: git.cryptic.systems/volker.raschek/gosec:{{#if build.tag}}{{trimPrefix "v" build.tag}}{{else}}latest{{/if}}-arm64-v8
    platform:
      architecture: arm64
      os: linux
--- a/renovate.json
+++ b/renovate.json
@ -1,8 +1,6 @@
 {
  "$schema": "https://docs.renovatebot.com/renovate-schema.json",
  "assignees": [ "volker.raschek" ],
-  "automergeStrategy": "merge-commit",
-  "automergeType": "pr",
  "labels": [ "renovate" ],
  "packageRules": [
    {
@ -11,6 +9,14 @@
      "matchManagers": "droneci",
      "matchUpdateTypes": [ "minor", "patch"]
    },
+    {
+      "description": "Automatically update patch version of used container images in docker files",
+      "addLabels": [ "renovate/container-image", "renovate/automerge" ],
+      "automerge": true,
+      "matchBaseBranches": [ "master" ],
+      "matchManagers": [ "dockerfile" ],
+      "matchUpdateTypes": [ "patch" ]
+    },
    {
      "addLabels": [ "renovate/gosec", "renovate/automerge" ],
      "automerge": false,