Homelab/workflows
Homelab/workflows
Watch
5
0
Fork
You've already forked workflows
 0
Code Issues 7 Pull requests Projects Releases 95 Packages Wiki Activity Actions
95 releases 129 tags
  • v1.2.0 6892147cee

    v1.2.0
    All checks were successful
    Repository security / security-1 (push) Successful in 1m16s
    Details
    Repository security / security (push) Successful in 0s
    Details
    Library checks / tests (push) Successful in 1m48s
    Details
    Stable

    gitchegumi released this 2026-09-04 20:13:32 -05:00 | 299 commits to main since this release

    Added

    • ShellCheck scanning for shell scripts.
    • Configurable Helm and Kustomize rendering before IaC scans.
    • Strict Kubernetes schema validation with checksum-pinned Kubeconform.
    • Trivy scanning of rendered manifests.
    • Scheduled repository security scans using the pinned workflow library.

    Fixed

    • Reject unknown resource kinds, missing schemas, skipped resources, and empty Kubernetes validation plans.
    • Print sanitized finding details and scanner errors for easier troubleshooting.
    • Preserve exact, expiring mitigations for reviewed findings.
    • Remove unsupported Forgejo workflow permissions.

    Adoption

    Update workflow references and library_ref from v1.1.0 to v1.2.0.

    For Kubernetes validation, add .pipeline/validation.json using the supplied example. Configure at least one manifest pattern or render entry. Custom resources without supported schemas fail validation; controller-specific schema support remains future work.

    Downloads