Configure renovate version comments for some linters (#3627)

* Configure renovate for PSScriptAnalyzer * Configure renovate for pmd * Configure renovate for tflint * Configure renovate for editorconfig-checker * Configure renovate for detekt * Build
oxsecurity · Jun 9, 2024 · a26ea58 · a26ea58
1 parent a5a9870
commit a26ea58
Show file tree

Hide file tree

Showing 29 changed files with 174 additions and 64 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -11,8 +11,12 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
+# renovate: datasource=docker depName=ghcr.io/terraform-linters/tflint
 ARG TFLINT_VERSION=0.51.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -27,7 +31,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM golang:1-alpine as revive
 ## The golang image used as a builder is a temporary workaround (https://github.com/mgechev/revive/issues/787)
 ## for the released revive binaries not returning version numbers (devel). 
@@ -68,9 +72,15 @@ ARG BICEP_EXE='bicep'
 ARG BICEP_URI='https://github.com/Azure/bicep/releases/latest/download/bicep-linux-musl-x64'
 ARG BICEP_DIR='/usr/local/bin'
 ARG DART_VERSION='2.8.4'
+# renovate: datasource=github-tags depName=pmd/pmd extractVersion=^pmd_releases/(?<version>.*)$
 ARG PMD_VERSION=7.1.0
-ARG DETEKT_VERSION='1.23.6'
-ARG PSSA_VERSION='latest'
+
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
+# renovate: datasource=nuget depName=PSScriptAnalyzer registryUrl=https://www.powershellgallery.com/api/v2/
+ARG PSSA_VERSION='1.22.0'
+
 #ARG__END
 
 # Static args

diff --git a/flavors/c_cpp/Dockerfile b/flavors/c_cpp/Dockerfile
@@ -12,7 +12,9 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -27,7 +29,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM ghcr.io/yannh/kubeconform:latest-alpine as kubeconform
 FROM yoheimuta/protolint:latest as protolint
 FROM zricethezav/gitleaks:v8.18.2 as gitleaks
@@ -45,7 +47,9 @@ FROM python:3.12.3-alpine3.19
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARG__START
-ARG DETEKT_VERSION='1.23.6'
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
 #ARG__END
 
 # Static args

diff --git a/flavors/cupcake/Dockerfile b/flavors/cupcake/Dockerfile
@@ -12,8 +12,12 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
+# renovate: datasource=docker depName=ghcr.io/terraform-linters/tflint
 ARG TFLINT_VERSION=0.51.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -28,7 +32,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM golang:1-alpine as revive
 ## The golang image used as a builder is a temporary workaround (https://github.com/mgechev/revive/issues/787)
 ## for the released revive binaries not returning version numbers (devel). 
@@ -56,8 +60,12 @@ FROM python:3.12.3-alpine3.19
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARG__START
+# renovate: datasource=github-tags depName=pmd/pmd extractVersion=^pmd_releases/(?<version>.*)$
 ARG PMD_VERSION=7.1.0
-ARG DETEKT_VERSION='1.23.6'
+
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
 #ARG__END
 
 # Static args

diff --git a/flavors/documentation/Dockerfile b/flavors/documentation/Dockerfile
@@ -12,7 +12,9 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -27,7 +29,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM ghcr.io/yannh/kubeconform:latest-alpine as kubeconform
 FROM yoheimuta/protolint:latest as protolint
 FROM zricethezav/gitleaks:v8.18.2 as gitleaks
@@ -45,7 +47,9 @@ FROM python:3.12.3-alpine3.19
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARG__START
-ARG DETEKT_VERSION='1.23.6'
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
 #ARG__END
 
 # Static args

diff --git a/flavors/dotnet/Dockerfile b/flavors/dotnet/Dockerfile
@@ -12,7 +12,9 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -27,7 +29,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM ghcr.io/yannh/kubeconform:latest-alpine as kubeconform
 FROM yoheimuta/protolint:latest as protolint
 FROM zricethezav/gitleaks:v8.18.2 as gitleaks
@@ -51,8 +53,12 @@ ARG ARM_TTK_DIRECTORY='/opt/microsoft'
 ARG BICEP_EXE='bicep'
 ARG BICEP_URI='https://github.com/Azure/bicep/releases/latest/download/bicep-linux-musl-x64'
 ARG BICEP_DIR='/usr/local/bin'
-ARG DETEKT_VERSION='1.23.6'
-ARG PSSA_VERSION='latest'
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
+# renovate: datasource=nuget depName=PSScriptAnalyzer registryUrl=https://www.powershellgallery.com/api/v2/
+ARG PSSA_VERSION='1.22.0'
+
 #ARG__END
 
 # Static args

diff --git a/flavors/dotnetweb/Dockerfile b/flavors/dotnetweb/Dockerfile
@@ -12,7 +12,9 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -27,7 +29,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM ghcr.io/yannh/kubeconform:latest-alpine as kubeconform
 FROM yoheimuta/protolint:latest as protolint
 FROM zricethezav/gitleaks:v8.18.2 as gitleaks
@@ -51,8 +53,12 @@ ARG ARM_TTK_DIRECTORY='/opt/microsoft'
 ARG BICEP_EXE='bicep'
 ARG BICEP_URI='https://github.com/Azure/bicep/releases/latest/download/bicep-linux-musl-x64'
 ARG BICEP_DIR='/usr/local/bin'
-ARG DETEKT_VERSION='1.23.6'
-ARG PSSA_VERSION='latest'
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
+# renovate: datasource=nuget depName=PSScriptAnalyzer registryUrl=https://www.powershellgallery.com/api/v2/
+ARG PSSA_VERSION='1.22.0'
+
 #ARG__END
 
 # Static args

diff --git a/flavors/formatters/Dockerfile b/flavors/formatters/Dockerfile
@@ -32,7 +32,9 @@ FROM python:3.12.3-alpine3.19
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARG__START
-ARG PSSA_VERSION='latest'
+# renovate: datasource=nuget depName=PSScriptAnalyzer registryUrl=https://www.powershellgallery.com/api/v2/
+ARG PSSA_VERSION='1.22.0'
+
 #ARG__END
 
 # Static args

diff --git a/flavors/go/Dockerfile b/flavors/go/Dockerfile
@@ -12,7 +12,9 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -27,7 +29,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM golang:1-alpine as revive
 ## The golang image used as a builder is a temporary workaround (https://github.com/mgechev/revive/issues/787)
 ## for the released revive binaries not returning version numbers (devel). 
@@ -51,7 +53,9 @@ FROM python:3.12.3-alpine3.19
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARG__START
-ARG DETEKT_VERSION='1.23.6'
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
 #ARG__END
 
 # Static args

diff --git a/flavors/java/Dockerfile b/flavors/java/Dockerfile
@@ -12,7 +12,9 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -27,7 +29,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM ghcr.io/yannh/kubeconform:latest-alpine as kubeconform
 FROM yoheimuta/protolint:latest as protolint
 FROM zricethezav/gitleaks:v8.18.2 as gitleaks
@@ -45,8 +47,12 @@ FROM python:3.12.3-alpine3.19
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARG__START
+# renovate: datasource=github-tags depName=pmd/pmd extractVersion=^pmd_releases/(?<version>.*)$
 ARG PMD_VERSION=7.1.0
-ARG DETEKT_VERSION='1.23.6'
+
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
 #ARG__END
 
 # Static args

diff --git a/flavors/javascript/Dockerfile b/flavors/javascript/Dockerfile
@@ -12,7 +12,9 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -27,7 +29,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM ghcr.io/yannh/kubeconform:latest-alpine as kubeconform
 FROM yoheimuta/protolint:latest as protolint
 FROM zricethezav/gitleaks:v8.18.2 as gitleaks
@@ -45,7 +47,9 @@ FROM python:3.12.3-alpine3.19
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARG__START
-ARG DETEKT_VERSION='1.23.6'
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
 #ARG__END
 
 # Static args

diff --git a/flavors/php/Dockerfile b/flavors/php/Dockerfile
@@ -12,7 +12,9 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -27,7 +29,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM ghcr.io/yannh/kubeconform:latest-alpine as kubeconform
 FROM yoheimuta/protolint:latest as protolint
 FROM zricethezav/gitleaks:v8.18.2 as gitleaks
@@ -45,7 +47,9 @@ FROM python:3.12.3-alpine3.19
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARG__START
-ARG DETEKT_VERSION='1.23.6'
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
 #ARG__END
 
 # Static args

diff --git a/flavors/python/Dockerfile b/flavors/python/Dockerfile
@@ -12,7 +12,9 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-ARG EDITORCONFIG_CHECKER_VERSION=latest
+# renovate: datasource=docker depName=mstruebing/editorconfig-checker
+ARG EDITORCONFIG_CHECKER_VERSION=v3.0.1
+
 #ARGTOP__END
 
 #############################################################################################
@@ -27,7 +29,7 @@ FROM koalaman/shellcheck:stable as shellcheck
 # FROM koalaman/shellcheck:stable as shellcheck
 FROM mvdan/shfmt:latest-alpine as shfmt
 FROM hadolint/hadolint:v2.12.0-alpine as hadolint
-FROM mstruebing/editorconfig-checker:$EDITORCONFIG_CHECKER_VERSION as editorconfig-checker
+FROM mstruebing/editorconfig-checker:${EDITORCONFIG_CHECKER_VERSION} as editorconfig-checker
 FROM ghcr.io/yannh/kubeconform:latest-alpine as kubeconform
 FROM yoheimuta/protolint:latest as protolint
 FROM zricethezav/gitleaks:v8.18.2 as gitleaks
@@ -45,7 +47,9 @@ FROM python:3.12.3-alpine3.19
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARG__START
-ARG DETEKT_VERSION='1.23.6'
+# renovate: datasource=github-tags depName=detekt/detekt
+ARG DETEKT_VERSION=1.23.6
+
 #ARG__END
 
 # Static args