Richard Nixon
456e3e5614
- renovate.json: gitea platform, weekly schedule on Monday, pins ranges, manages docker-compose images + dockerfile + github-actions. Critical-infra packages get extra labels for review. - .forgejo/workflows/renovate.yml: runs Mondays 04:00 UTC, autodiscover Richard/* so the same workflow covers both this repo and the Hugo companion. Requires RENOVATE_TOKEN secret (instructions in README). - .forgejo/workflows/trivy.yml: daily 05:00 UTC + on-push. Scans both IaC configs in infrastructure/ and every image referenced in docker-compose.yml for HIGH/CRITICAL CVEs (fixable only). - Pin Traefik (3.6.7) and traefik-crowdsec-bouncer (0.5.0) so Renovate has a baseline to bump. |
||
|---|---|---|
| .. | ||
| blog-static | ||
| crowdsec | ||
| forgejo-runner | ||
| grafana/provisioning | ||
| loki | ||
| prometheus | ||
| promtail | ||
| traefik | ||
| valheim-status | ||
| wp-plugins/custom-security | ||
| .env.example | ||
| docker-compose.yml | ||