ci: install versioned trivy+gitleak
This commit is contained in:
@@ -18,6 +18,12 @@ act_runner_download_url: "https://gitea.com/gitea/runner/releases/download/v{{ a
|
||||
# fails with "Cannot find: node in PATH". Bump this to change versions.
|
||||
node_major_version: "26"
|
||||
|
||||
# Security scanners pre-installed on the host so workflow steps use the local
|
||||
# binary instead of writing to /usr/local/bin as the runner user ("Permission
|
||||
# denied"). gitleaks_version must match GITLEAKS_VERSION in pr-security-check.yml.
|
||||
trivy_version: "0.71.2"
|
||||
gitleaks_version: "8.30.1"
|
||||
|
||||
# Registration tokens come from env vars named by each project's `token_env`
|
||||
# (e.g. RUNNER_TOKEN_GATEHOUSE_API). Export them on the control node before running.
|
||||
# Mint from: Gitea repo → Settings → Actions → Runners → Create new runner token.
|
||||
|
||||
Reference in New Issue
Block a user