diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..49d8e48 --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,24 @@ +version: 2 +updates: + # version updates: enabled + # security updates: enabled + - package-ecosystem: "github-actions" + directory: "/" + schedule: + interval: "weekly" + - package-ecosystem: "docker" + directory: "cicd" + schedule: + interval: "daily" + ignore: + - dependency-name: "golang" + update-types: ["version-update:semver-major"] + + # version updates: disabled + # security updates: enabled + # https://docs.github.com/en/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates#overriding-the-default-behavior-with-a-configuration-file + - package-ecosystem: "gomod" + directory: "/" + schedule: + interval: "daily" + open-pull-requests-limit: 0 diff --git a/cicd/Dockerfile b/cicd/Dockerfile index 3b3b1d6..adb3833 100644 --- a/cicd/Dockerfile +++ b/cicd/Dockerfile @@ -1,7 +1,7 @@ -#syntax=docker/dockerfile-upstream:1.4 +#syntax=docker/dockerfile-upstream:1.5 ARG GO_APP -FROM base as deps +FROM alpine:3.17.3 as deps ARG GO_APP @@ -25,7 +25,7 @@ RUN < /etc/apt/sources.list.d/goreleaser.list + apt-get update + apt-get install -y goreleaser + rm -rf /var/lib/apt/lists/* +EOT + +FROM build ARG CI ARG GITHUB_TOKEN @@ -9,9 +20,9 @@ COPY --from=src . /go/src RUN <