k.renner
f34108b252
Security Audit / Infrastructure Scan (IaC) (push) Successful in 24s
Security Audit / Docker Image Scan (docker.io/apache/tika:latest) (push) Failing after 1m52s
Security Audit / Docker Image Scan (docker.io/gotenberg/gotenberg:8) (push) Failing after 2m20s
Security Audit / Docker Image Scan (docker.io/library/postgres:15) (push) Failing after 29s
Security Audit / Docker Image Scan (docker.io/library/redis:7) (push) Failing after 19s
Security Audit / Docker Image Scan (ghcr.io/icereed/paperless-gpt:latest) (push) Failing after 25s
Security Audit / Docker Image Scan (ghcr.io/paperless-ngx/paperless-ngx:latest) (push) Failing after 2m25s
Security Audit / Docker Image Scan (shenxn/protonmail-bridge:latest) (push) Successful in 19s
Deploy Infrastructure / plan (push) Successful in 16m2s
Deploy Infrastructure / apply (push) Failing after 55s
Deploy Infrastructure / integration-tests (push) Has been skipped
Deploy Woodpecker CI server (LXC 231) and 2 agents (LXC 910-911): OpenTofu: - lxc_231_woodpecker.tf: Server on jupiter, 1GB RAM, ci.renner.uno - woodpecker_agents.tf: 2 agents with Docker, 2GB RAM each - locals.tf: Add woodpecker_agents spec list - variables.tf: Add woodpecker_agent_count variable Ansible: - woodpecker-server role: Docker Compose, SQLite, Gitea OAuth - woodpecker-agent role: Docker Compose, GRPC to server - Playbooks for server and agent install - Inventory entries and group_vars with vault secrets - Caddy reverse proxy entry for ci.renner.uno Woodpecker pipelines (.woodpecker/): - build-caddy.yml: Custom Caddy binary build - deploy-infrastructure.yml: OpenTofu plan + apply - security-scan.yml: Trivy IaC and Docker image scans Vault: Added GRPC secret and Gitea OAuth placeholder secrets.