Use renovate with lychee (#4541)

* Add lychee to renovate * [build-command] Update generated files --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
oxsecurity · Jan 19, 2025 · 0b01269 · 0b01269
1 parent 0a2000c
commit 0b01269
Show file tree

Hide file tree

Showing 18 changed files with 55 additions and 19 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -33,6 +33,8 @@ ARG REPOSITORY_KICS_VERSION=v2.1.3-alpine
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 # renovate: datasource=docker depName=ghcr.io/terraform-linters/tflint
 ARG TERRAFORM_TFLINT_VERSION=0.55.0
 # renovate: datasource=docker depName=tenable/terrascan
@@ -69,7 +71,7 @@ FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM checkmarx/kics:${REPOSITORY_KICS_VERSION} AS kics
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 FROM ghcr.io/terraform-linters/tflint:v${TERRAFORM_TFLINT_VERSION} AS tflint
 FROM tenable/terrascan:${TERRAFORM_TERRASCAN_VERSION} AS terrascan
 FROM alpine/terragrunt:${TERRAFORM_TERRAGRUNT_VERSION} AS terragrunt

diff --git a/flavors/c_cpp/Dockerfile b/flavors/c_cpp/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/cupcake/Dockerfile b/flavors/cupcake/Dockerfile
@@ -30,6 +30,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_KICS_VERSION=v2.1.3-alpine
 # renovate: datasource=docker depName=trufflesecurity/trufflehog 
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 # renovate: datasource=docker depName=ghcr.io/terraform-linters/tflint
 ARG TERRAFORM_TFLINT_VERSION=0.55.0
 # renovate: datasource=docker depName=tenable/terrascan
@@ -61,7 +63,7 @@ FROM ghcr.io/yannh/kubeconform:${KUBERNETES_KUBECONFORM_VERSION} AS kubeconform
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM checkmarx/kics:${REPOSITORY_KICS_VERSION} AS kics
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 FROM ghcr.io/terraform-linters/tflint:v${TERRAFORM_TFLINT_VERSION} AS tflint
 FROM tenable/terrascan:${TERRAFORM_TERRASCAN_VERSION} AS terrascan
 FROM alpine/terragrunt:${TERRAFORM_TERRAGRUNT_VERSION} AS terragrunt

diff --git a/flavors/documentation/Dockerfile b/flavors/documentation/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/dotnet/Dockerfile b/flavors/dotnet/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/dotnetweb/Dockerfile b/flavors/dotnetweb/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/go/Dockerfile b/flavors/go/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -58,7 +60,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/java/Dockerfile b/flavors/java/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/javascript/Dockerfile b/flavors/javascript/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/php/Dockerfile b/flavors/php/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/python/Dockerfile b/flavors/python/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/ruby/Dockerfile b/flavors/ruby/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/rust/Dockerfile b/flavors/rust/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/salesforce/Dockerfile b/flavors/salesforce/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/swift/Dockerfile b/flavors/swift/Dockerfile
@@ -32,6 +32,8 @@ ARG REPOSITORY_GITLEAKS_VERSION=v8.23.1
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
@@ -51,7 +53,7 @@ FROM yoheimuta/protolint:${PROTOBUF_PROTOLINT_VERSION} AS protolint
 FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/flavors/terraform/Dockerfile b/flavors/terraform/Dockerfile
@@ -34,6 +34,8 @@ ARG REPOSITORY_KICS_VERSION=v2.1.3-alpine
 ARG REPOSITORY_TRUFFLEHOG_VERSION=3.88.2
 # renovate: datasource=docker depName=jdkato/vale
 ARG SPELL_VALE_VERSION=v3.9.3
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 # renovate: datasource=docker depName=ghcr.io/terraform-linters/tflint
 ARG TERRAFORM_TFLINT_VERSION=0.55.0
 # renovate: datasource=docker depName=tenable/terrascan
@@ -60,7 +62,7 @@ FROM zricethezav/gitleaks:${REPOSITORY_GITLEAKS_VERSION} AS gitleaks
 FROM checkmarx/kics:${REPOSITORY_KICS_VERSION} AS kics
 FROM trufflesecurity/trufflehog:${REPOSITORY_TRUFFLEHOG_VERSION} AS trufflehog
 FROM jdkato/vale:${SPELL_VALE_VERSION} AS vale
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 FROM ghcr.io/terraform-linters/tflint:v${TERRAFORM_TFLINT_VERSION} AS tflint
 FROM tenable/terrascan:${TERRAFORM_TERRASCAN_VERSION} AS terrascan
 FROM alpine/terragrunt:${TERRAFORM_TERRAGRUNT_VERSION} AS terragrunt

diff --git a/linters/spell_lychee/Dockerfile b/linters/spell_lychee/Dockerfile
@@ -11,14 +11,15 @@
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #ARGTOP__START
-
+# renovate: datasource=docker depName=lycheeverse/lychee
+ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
 #ARGTOP__END
 
 #############################################################################################
 ## @generated by .automation/build.py using descriptor files, please do not update manually ##
 #############################################################################################
 #FROM__START
-FROM lycheeverse/lychee:latest-alpine AS lychee
+FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
 #FROM__END
 
 ##################

diff --git a/megalinter/descriptors/spell.megalinter-descriptor.yml b/megalinter/descriptors/spell.megalinter-descriptor.yml
@@ -209,5 +209,8 @@ linters:
       - 'lychee --format detailed --no-progress --glob-ignore-case --verbose "~/projects/**/[r]eadme.*"'
     install:
       dockerfile:
-        - FROM lycheeverse/lychee:latest-alpine AS lychee
+        - |-
+          # renovate: datasource=docker depName=lycheeverse/lychee
+          ARG SPELL_LYCHEE_VERSION=sha-a11d515-alpine
+        - FROM lycheeverse/lychee:${SPELL_LYCHEE_VERSION} AS lychee
         - COPY --link --from=lychee /usr/local/bin/lychee /usr/bin/