alexgit2k
alexgit2k
This is a very good idea, like other security analyzers are doing it: - Semgrep - In line: `// nosemgrep: ` (see https://semgrep.dev/docs/ignoring-files-folders-code/#reference-summary) - Before line: `// nosemgrep: ` (see...
> You can use [allowlists](https://github.com/zricethezav/gitleaks#configuration) to achieve this or use [`gitleaks:allow`](https://github.com/zricethezav/gitleaks/blob/master/detect/detect.go#L35) in a comment. I have seen `allowlists`, this is a powerfull feature with a lot of configuration possibilities but...
> Here is my own build and used in gitlab CI. And just added 7.0.0-rc.8 https://hub.docker.com/r/minkbear/php-deployer/tags Great, I will add it to the list above. Your tag [7.0.0-rc.8](https://hub.docker.com/layers/php-deployer/minkbear/php-deployer/7.0.0-rc.8/images/sha256-8ca4d1c93e0c6826f6e2cee281c0626076f66318dd2b88ae9b3608d319de7642?context=explore) uses PHP...
The docs are wrong, there is no deployer-image. See https://hub.docker.com/r/deployphp Otherwise the maintainer would not have added the feature-flag here. @alexislefebvre That's a nice solution for the deployer-maintainer or the...
> I would like to use the image with gitlab, unfortunately I don't quite understand. Could you create a short tutorial here - that would be great. @dennismetz There is...
> Isn't it just simply > > ```yaml > after: > deploy:failed: deploy:unlock > ``` > > untested - maybe `before` should be used 🤔 As said: When using the...
@minkbear Thanks, I updated the initial posting with the latest version. As Deployer version 7 is out of beta, tag `latest` should point to 7.1.3. Tag `7` should point to...
> Should we create automation to publish docker releases as well? That would save a lot of work, if docker images get created for new deployer-releases automatically. But first at...
> I can't seem to find the repo related to Dockerfile and builds for the images. @minkbear would you be willing to share these with us? https://github.com/minkbear/php-deployer
Interesting idea! The two hadolint-runs only take 6 seconds including docker-start. So I think it's a lot of more work to find out the right parameters for jq to get...