feat(gha): Add GitHub repo files (#77)

.github/renovate.json5

@@ -1,7 +1,5 @@
 {
   $schema: "https://docs.renovatebot.com/renovate-schema.json",
-  automerge: true,
-  automergeType: "branch",
   extends: [
     "config:recommended",
     ":disableDependencyDashboard",

.github/workflows/renovate.yml

@@ -34,6 +34,9 @@ env:
   # https://docs.renovatebot.com/self-hosted-configuration/#dryrun
   # Run renovate in dry-run mode if executed in branches other than main - prevents versions in PRs/branches from being updated
   RENOVATE_DRY_RUN: "${{ inputs.dryRun || ( github.head_ref || github.ref_name ) != 'main' || false }}"
+  # Renovate Automerge
+  RENOVATE_AUTOMERGE_TYPE: "branch"
+  RENOVATE_AUTOMERGE: "true"
 
 permissions: read-all
 

.mega-linter.yml

@@ -35,6 +35,8 @@ REPOSITORY_DEVSKIM_ARGUMENTS: --ignore-globs CHANGELOG.md --ignore-rule-ids DS16
 # Communication Over HTTP
 REPOSITORY_KICS_ARGUMENTS: --exclude-queries 2e8d4922-8362-4606-8c14-aa10466a1ce3
 
+REPOSITORY_TRIVY_ARGUMENTS: --ignorefile .trivyignore.yml --severity HIGH,CRITICAL
+
 TERRAFORM_TFLINT_UNSECURED_ENV_VARIABLES:
   - GITHUB_TOKEN
 

lychee.toml

@@ -22,18 +22,21 @@ accept = [999]
 #############################  Exclusions  ##########################
 
 # Exclude URLs and mail addresses from checking (supports regex)
-# https://github.com/cotes2020/jekyll-theme-chirpy/issues/758
 exclude = [
-  # Ignore Docker Hub
-  'https://hub.docker.com',
-  'https://non-existing-domain.com/',
+  # Ignore all URLs with '$' - BASH variable in URL
+  '\$',
+  # Ignore all URLs with '{ ... }' - BASH / Ansible variable in URL
+  '%7B.*%7D',
+  # Ignore all URLs which starts with 'file://'
+  'file://'
 ]
 
 # Exclude these filesystem paths from getting checked
 exclude_path = [
+  "CHANGELOG.md",
 ]
 
 # Exclude all private IPs from checking.
 # Equivalent to setting `exclude_private`, `exclude_link_local`, and
 # `exclude_loopback` to true
-exclude_all_private = false
+exclude_all_private = true