c675a347d1
ci: update to docker/build-push-action@v2
2021-02-20 10:02:23 +01:00
c2ed69da6d
ci: use bundler cache to save resources
...
- see https://github.com/ruby/setup-ruby#caching-bundle-install-automatically
2020-12-26 15:19:20 +01:00
23c09f722c
gem: add Ruby 3.0 support
2020-12-25 16:45:51 +01:00
2a7ea2bb8f
ci: use Github environment files (fix part 2)
...
- fixing vulnerability via https://docs.github.com/en/free-pro-team@latest/actions/reference/workflow-commands-for-github-actions#environment-files
2020-12-20 22:15:39 +01:00
Christian Nicolai
268e18f2e5
ci: allow manually triggering CI run on GHA
2020-12-04 09:07:09 +01:00
e8e9e0cb71
ci: use GHA ruby/setup-ruby instead of broken actions/setup-ruby
...
- actions/setup-ruby does not work on new GHA runners Ubuntu 20.04 (missing bundler in 2.5) as per https://github.com/actions/setup-ruby/issues/70
- might be deprecated as per https://github.com/actions/setup-ruby/issues/80
- https://github.com/ruby/setup-ruby is recommended is superior
2020-12-04 09:04:23 +01:00
dc325d686e
ci: use Github Actions in parallel to Travis CI
...
- this adds a new workflow for Github Actions that mirrors what the existing Travis CI workflow tests
- Travis CI might become unfriendly to opensource soonish so migration might be necessary
2020-11-25 09:39:55 +01:00
ff136f7b16
ci: add periodic pulling of all Docker image tags to avoid staleness
2020-11-19 11:05:26 +01:00
d1c1a98e47
ci: use Github environment files
...
- fixing vulnerability via https://docs.github.com/en/free-pro-team@latest/actions/reference/workflow-commands-for-github-actions#environment-files
2020-10-08 12:32:44 +02:00
d62bf71820
ci: ignore false-positive 3rd party lockfiles for trivy
2020-10-08 12:29:35 +02:00
6ed0799f49
ci: improve ignore of false-positives on 3rd party lockfiles
...
- amends 5b332d8f57
2020-08-30 11:41:23 +02:00
5b332d8f57
ci: ignore false-positive 3rd party lockfiles for trivy
...
- uses newly released `--skip-dirs` flag of Trivy 0.11.0
2020-08-30 11:34:26 +02:00
e36b210f66
ci: update github actions versions
2020-08-21 16:39:11 +02:00
fcc3f12284
ci: fix vulnscan behavior to scan most-recent semver
2020-08-19 14:33:26 +02:00
35ced6468e
ci: allow manual run of vulnscan action workflow
2020-08-18 22:53:33 +02:00
617fbf538b
docker: add image release on tag and periodic vulnerability scan
2020-08-18 22:22:41 +02:00
