chore: add renovate config with SHA-pinned action regex manager #6

Closed
cloudix_mcp_server wants to merge 1 commits from chore/renovate into master
Owner

Audit findings

Renovate's built-in github-actions manager on Gitea platform cannot resolve SHA-pinned action references (uses: action@sha). The Dashboard shows "github-actions (1)" but extracts zero deps.

Changes

  • renovate.json: Add custom regex manager for SHA-pinned Gitea actions using github-releases datasource
  • .gitlab-ci.yml: Remove quotes from image: line so gitlabci manager can detect docker:latest

Missing deps detected by audit

  • 5 SHA-pinned actions (checkout, hadolint, gitea-upload-artifact, gitea-download-artifact, docker/login-action) need regex manager to track
## Audit findings Renovate's built-in `github-actions` manager on Gitea platform cannot resolve SHA-pinned action references (uses: action@sha). The Dashboard shows "github-actions (1)" but extracts zero deps. ### Changes - **renovate.json**: Add custom regex manager for SHA-pinned Gitea actions using `github-releases` datasource - **.gitlab-ci.yml**: Remove quotes from `image:` line so gitlabci manager can detect `docker:latest` ### Missing deps detected by audit - 5 SHA-pinned actions (checkout, hadolint, gitea-upload-artifact, gitea-download-artifact, docker/login-action) need regex manager to track
cloudix_mcp_server added 1 commit 2026-06-08 22:13:33 -04:00
chore: add renovate config with SHA-pinned action regex manager, fix gitlabci image quotes
Docker Build and Push / lint (push) Successful in 6s
Docker Build and Push / lint (pull_request) Successful in 6s
Docker Build and Push / build (push) Successful in 26s
Docker Build and Push / test (push) Successful in 10s
Docker Build and Push / build (pull_request) Successful in 45s
Docker Build and Push / push (push) Successful in 22s
Docker Build and Push / test (pull_request) Successful in 11s
Docker Build and Push / push (pull_request) Has been skipped
9b7fc4d3de
Some checks are pending
Docker Build and Push / lint (push) Successful in 6s
Docker Build and Push / lint (pull_request) Successful in 6s
Docker Build and Push / build (push) Successful in 26s
Docker Build and Push / test (push) Successful in 10s
Docker Build and Push / build (pull_request) Successful in 45s
Docker Build and Push / push (push) Successful in 22s
Docker Build and Push / test (pull_request) Successful in 11s
Docker Build and Push / push (pull_request) Has been skipped

Pull request closed

Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: perso/sslscan#6