chore: add renovate config with SHA-pinned action regex manager #5

Closed
cloudix_mcp_server wants to merge 1 commits from chore/renovate into master
Owner

Audit findings

Renovate's built-in github-actions manager on Gitea platform cannot resolve SHA-pinned action references (uses: action@sha). The Dashboard shows "github-actions (1)" but extracts zero deps.

Changes

  • renovate.json: Add custom regex manager for SHA-pinned Gitea actions using github-releases datasource
  • .gitlab-ci.yml: Remove quotes from image: line so gitlabci manager can detect docker:latest

Missing deps detected by audit

  • 5 SHA-pinned actions (checkout, hadolint, gitea-upload-artifact, gitea-download-artifact, docker/login-action) need regex manager to track
## Audit findings Renovate's built-in `github-actions` manager on Gitea platform cannot resolve SHA-pinned action references (uses: action@sha). The Dashboard shows "github-actions (1)" but extracts zero deps. ### Changes - **renovate.json**: Add custom regex manager for SHA-pinned Gitea actions using `github-releases` datasource - **.gitlab-ci.yml**: Remove quotes from `image:` line so gitlabci manager can detect `docker:latest` ### Missing deps detected by audit - 5 SHA-pinned actions (checkout, hadolint, gitea-upload-artifact, gitea-download-artifact, docker/login-action) need regex manager to track
cloudix_mcp_server added 1 commit 2026-06-08 22:13:42 -04:00
chore: add renovate config with SHA-pinned action regex manager, fix gitlabci image quotes
Docker Build and Push / lint (pull_request) Successful in 8s
Docker Build and Push / build (pull_request) Successful in 1m37s
Docker Build and Push / test (pull_request) Successful in 33s
Docker Build and Push / push (pull_request) Has been skipped
Docker Build and Push / lint (push) Successful in 6s
Docker Build and Push / build (push) Successful in 51s
Docker Build and Push / test (push) Successful in 17s
Docker Build and Push / push (push) Successful in 52s
b8df3625f0
Some checks are pending
Docker Build and Push / lint (pull_request) Successful in 8s
Docker Build and Push / build (pull_request) Successful in 1m37s
Docker Build and Push / test (pull_request) Successful in 33s
Docker Build and Push / push (pull_request) Has been skipped
Docker Build and Push / lint (push) Successful in 6s
Docker Build and Push / build (push) Successful in 51s
Docker Build and Push / test (push) Successful in 17s
Docker Build and Push / push (push) Successful in 52s

Pull request closed

Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: perso/cipherscan#5