hoverkraft-tech
diff --git a/‎.devcontainer/devcontainer.json‎
Lines changed: 27 additions & 27 deletions b/‎.devcontainer/devcontainer.json‎
Lines changed: 27 additions & 27 deletions
diff --git a/‎.github/dependabot.yml‎
Lines changed: 10 additions & 0 deletions b/‎.github/dependabot.yml‎
Lines changed: 10 additions & 0 deletions
diff --git a/‎.github/linters/.codespellrc‎
Lines changed: 2 additions & 0 deletions b/‎.github/linters/.codespellrc‎
Lines changed: 2 additions & 0 deletions
diff --git a/‎.github/linters/.jscpd.json‎
Lines changed: 2 additions & 2 deletions b/‎.github/linters/.jscpd.json‎
Lines changed: 2 additions & 2 deletions
diff --git a/‎.github/linters/trivy-data/ksv0125.yaml‎
Lines changed: 9 additions & 0 deletions b/‎.github/linters/trivy-data/ksv0125.yaml‎
Lines changed: 9 additions & 0 deletions
diff --git a/‎.github/linters/trivy.yaml‎
Lines changed: 13 additions & 0 deletions b/‎.github/linters/trivy.yaml‎
Lines changed: 13 additions & 0 deletions
diff --git a/‎.github/workflows/__greetings.yml‎
Lines changed: 3 additions & 2 deletions b/‎.github/workflows/__greetings.yml‎
Lines changed: 3 additions & 2 deletions
diff --git a/‎.github/workflows/__main-ci.yml‎
Lines changed: 6 additions & 3 deletions b/‎.github/workflows/__main-ci.yml‎
Lines changed: 6 additions & 3 deletions
diff --git a/‎.github/workflows/__need-fix-to-issue.yml‎
Lines changed: 1 addition & 1 deletion b/‎.github/workflows/__need-fix-to-issue.yml‎
Lines changed: 1 addition & 1 deletion
diff --git a/‎.github/workflows/__pull-request-ci.yml‎
Lines changed: 2 additions & 1 deletion b/‎.github/workflows/__pull-request-ci.yml‎
Lines changed: 2 additions & 1 deletion
@@ -1,29 +1,29 @@
 {
-  "name": "Alpine",
-  "image": "mcr.microsoft.com/devcontainers/base:alpine-3.21",
-  "features": {
-    "ghcr.io/devcontainers/features/docker-in-docker:3": {},
-    "ghcr.io/devcontainers/features/github-cli:1": {},
-    "ghcr.io/devcontainers-extra/features/act:1": {}
-  },
-  "remoteEnv": {
-    "GITHUB_TOKEN": "${localEnv:GITHUB_TOKEN}"
-  },
-  "customizations": {
-    "vscode": {
-      "extensions": [
-        "eamodio.gitlens",
-        "github.vscode-github-actions",
-        "github.copilot",
-        "github.copilot-chat",
-        "ms-vscode.makefile-tools",
-        "esbenp.prettier-vscode",
-        "ms-azuretools.vscode-containers",
-        "Tim-Koehler.helm-intellisense"
-      ],
-      "settings": {
-        "terminal.integrated.defaultProfile.linux": "zsh"
-      }
-    }
-  }
+	"name": "Alpine",
+	"image": "mcr.microsoft.com/devcontainers/base:alpine-3.21",
+	"features": {
+		"ghcr.io/devcontainers/features/docker-in-docker:3": {},
+		"ghcr.io/devcontainers/features/github-cli:1": {},
+		"ghcr.io/devcontainers-extra/features/act:1": {}
+	},
+	"remoteEnv": {
+		"GITHUB_TOKEN": "${localEnv:GITHUB_TOKEN}"
+	},
+	"customizations": {
+		"vscode": {
+			"extensions": [
+				"eamodio.gitlens",
+				"github.vscode-github-actions",
+				"github.copilot",
+				"github.copilot-chat",
+				"ms-vscode.makefile-tools",
+				"esbenp.prettier-vscode",
+				"ms-azuretools.vscode-containers",
+				"Tim-Koehler.helm-intellisense"
+			],
+			"settings": {
+				"terminal.integrated.defaultProfile.linux": "zsh"
+			}
+		}
+	}
 }
@@ -4,6 +4,8 @@ updates:
   - package-ecosystem: docker
     open-pull-requests-limit: 20
     directory: "/"
+    cooldown:
+      default-days: 7
     schedule:
       interval: weekly
       day: friday
@@ -18,6 +20,8 @@ updates:
     directories:
       - "/"
       - "/actions/**/*"
+    cooldown:
+      default-days: 7
     schedule:
       interval: weekly
       day: friday
@@ -31,6 +35,8 @@ updates:
     open-pull-requests-limit: 20
     directories:
       - "/tests/charts/*/*"
+    cooldown:
+      default-days: 7
     schedule:
       interval: weekly
       day: friday
@@ -43,6 +49,8 @@ updates:
   - package-ecosystem: "devcontainers"
     open-pull-requests-limit: 20
     directory: "/"
+    cooldown:
+      default-days: 7
     schedule:
       interval: weekly
       day: friday
@@ -52,6 +60,8 @@ updates:
     open-pull-requests-limit: 20
     directories:
       - "/actions/**/*"
+    cooldown:
+      default-days: 7
     schedule:
       interval: weekly
       day: friday
 
@@ -0,0 +1,2 @@
+[codespell]
+skip = *.svg,**/package-lock.json,**/node_modules/**
@@ -1,4 +1,4 @@
 {
-  "threshold": 5,
-  "ignore": ["**/tests/**", "**/node_modules/**"]
+	"threshold": 5,
+	"ignore": ["**/tests/**", "**/node_modules/**"]
 }
@@ -0,0 +1,9 @@
+---
+ksv0125:
+  trusted_registries:
+    - ghcr.io
+    - docker.io
+    - quay.io
+    - gcr.io
+    - k8s.gcr.io
+    - registry.k8s.io
@@ -0,0 +1,13 @@
+---
+exit-code: 1
+exit-on-eol: 2
+ignorefile: .trivyignore.yaml
+scan:
+  disable-telemetry: true
+  scanners:
+    - vuln
+    - misconfig
+    - secret
+rego:
+  data:
+    - .github/linters/trivy-data
@@ -3,14 +3,15 @@ name: Greetings
 on:
   issues:
     types: [opened]
-  pull_request_target:
+  pull_request:
+    types: [opened]
     branches: [main]
 
 permissions: {}
 
 jobs:
   greetings:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@66578f5b9aec4ac5558b5dad750c4c74dfcb65c5 # 0.35.5
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/greetings.yml@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
     permissions:
       contents: read
       issues: write
 
@@ -29,7 +29,8 @@ jobs:
       pull-requests: read
       security-events: write
       statuses: write
-    secrets: inherit
+    secrets:
+      CI_BOT_APP_PRIVATE_KEY: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }}
 
   clean:
     needs: ci
@@ -73,17 +74,19 @@ jobs:
       pull-requests: write
     steps:
       - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
+        with:
+          persist-credentials: false
 
       - uses: ./actions/helm/generate-docs
         with:
           working-directory: ./tests/charts
           github-app-client-id: ${{ vars.CI_BOT_APP_CLIENT_ID }}
-          github-app-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }}
+          github-app-key: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }} # zizmor: ignore[secrets-outside-env]
 
   release:
     needs: ci
     if: github.event_name != 'schedule'
-    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@84d583ba7b357f9476707f54cf5419d630ae0145 # 0.26.2
+    uses: hoverkraft-tech/ci-github-publish/.github/workflows/release-actions.yml@b2562b46714e535a0113f90f554b55e1248212c1 # 0.26.3
     permissions:
       contents: read
     with:
 
@@ -21,7 +21,7 @@ permissions: {}
 
 jobs:
   main:
-    uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@66578f5b9aec4ac5558b5dad750c4c74dfcb65c5 # 0.35.5
+    uses: hoverkraft-tech/ci-github-common/.github/workflows/need-fix-to-issue.yml@6a0fdae9e2598eccf7a9ec2bc20e7ce8e7c10c48 # 0.36.4
     permissions:
       contents: read
       issues: write
 
@@ -24,4 +24,5 @@ jobs:
       pull-requests: read
       security-events: write
       statuses: write
-    secrets: inherit
+    secrets:
+      CI_BOT_APP_PRIVATE_KEY: ${{ secrets.CI_BOT_APP_PRIVATE_KEY }}
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,2 @@`
	`1`	`+[codespell]`
	`2`	`+skip = .svg,/package-lock.json,/node_modules/*`
Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`	`1`	`{`
`2`		`- "threshold": 5,`
`3`		`- "ignore": ["/tests/", "/node_modules/"]`
	`2`	`+ "threshold": 5,`
	`3`	`+ "ignore": ["/tests/", "/node_modules/"]`
`4`	`4`	`}`