.woodpecker/build-container.yml

@@ -14,8 +14,7 @@ steps:
       repo: thegeeklab/${CI_REPO_NAME}
 
   - name: security-scan
-    image: docker.io/aquasec/trivy
-    depends_on: security-build
+    image: ghcr.io/aquasecurity/trivy
     commands:
       - trivy -v
       - trivy image --input oci/${CI_REPO_NAME}
@@ -25,11 +24,10 @@ steps:
       TRIVY_NO_PROGRESS: "true"
       TRIVY_SEVERITY: HIGH,CRITICAL
       TRIVY_TIMEOUT: 1m
-      TRIVY_DB_REPOSITORY: docker.io/aquasec/trivy-db:2
 
   - name: publish-dockerhub
     image: quay.io/thegeeklab/wp-docker-buildx:5
-    depends_on: security-scan
+    group: container
     settings:
       auto_tag: true
       containerfile: Containerfile.multiarch
@@ -50,7 +48,7 @@ steps:
 
   - name: publish-quay
     image: quay.io/thegeeklab/wp-docker-buildx:5
-    depends_on: security-scan
+    group: container
     settings:
       auto_tag: true
       containerfile: Containerfile.multiarch

.woodpecker/docs.yml

@@ -8,11 +8,13 @@ when:
 steps:
   - name: markdownlint
     image: quay.io/thegeeklab/markdownlint-cli
+    group: test
     commands:
       - markdownlint 'README.md'
 
   - name: spellcheck
     image: quay.io/thegeeklab/alpine-tools
+    group: test
     commands:
       - spellchecker --files '_docs/**/*.md' 'README.md' -d .dictionary -p spell indefinite-article syntax-urls
     environment:
@@ -20,17 +22,18 @@ steps:
 
   - name: link-validation
     image: docker.io/lycheeverse/lychee
+    group: test
     commands:
       - lychee --no-progress --format detailed README.md
 
   - name: pushrm-dockerhub
     image: docker.io/chko/docker-pushrm:1
-    depends_on: [markdownlint, spellcheck, link-validation]
+    secrets:
+      - source: docker_password
+        target: DOCKER_PASS
+      - source: docker_username
+        target: DOCKER_USER
     environment:
-      DOCKER_PASS:
-        from_secret: docker_password
-      DOCKER_USER:
-        from_secret: docker_username
       PUSHRM_FILE: README.md
       PUSHRM_SHORT: Custom image for markdownlint-cli
       PUSHRM_TARGET: thegeeklab/${CI_REPO_NAME}
@@ -42,10 +45,10 @@ steps:
 
   - name: pushrm-quay
     image: docker.io/chko/docker-pushrm:1
-    depends_on: [markdownlint, spellcheck, link-validation]
+    secrets:
+      - source: quay_token
+        target: APIKEY__QUAY_IO
     environment:
-      APIKEY__QUAY_IO:
-        from_secret: quay_token
       PUSHRM_FILE: README.md
       PUSHRM_TARGET: quay.io/thegeeklab/${CI_REPO_NAME}
     when:

Containerfile.multiarch

@@ -1,4 +1,4 @@
-FROM docker.io/node:lts-alpine@sha256:f265794478aa0b1a23d85a492c8311ed795bc527c3fe7e43453b3c872dcd71a3
+FROM docker.io/node:lts-alpine@sha256:eb8101caae9ac02229bd64c024919fe3d4504ff7f329da79ca60a04db08cef52
 
 LABEL maintainer="Robert Kaussow <mail@thegeeklab.de>"
 LABEL org.opencontainers.image.authors="Robert Kaussow <mail@thegeeklab.de>"
@@ -10,7 +10,7 @@ LABEL org.opencontainers.image.documentation="https://gitea.rknet.org/container/
 ARG MARKDOWNLINT_VERSION
 
 # renovate: datasource=npm depName=markdownlint-cli
-ENV MARKDOWNLINT_VERSION="${MARKDOWNLINT_VERSION:-0.42.0}"
+ENV MARKDOWNLINT_VERSION="${MARKDOWNLINT_VERSION:-0.41.0}"
 
 ENV FORCE_COLOR=true \
     NPM_CONFIG_LOGLEVEL=error