feat: enable guarddog
Some checks failed
renovate / renovate (push) Successful in 50s
test-build / build (push) Successful in 1m13s
test-build / guarddog (push) Failing after 1m24s

This commit is contained in:
2026-02-11 14:50:17 -06:00
parent 00ef91b644
commit 19e80809c1

View File

@@ -51,35 +51,40 @@ jobs:
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-profile/actions?workflow=test-build.yaml", "clear": true}]' actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-profile/actions?workflow=test-build.yaml", "clear": true}]'
image: true image: true
# guarddog: guarddog:
# runs-on: ubuntu-js runs-on: ubuntu-js
# steps: steps:
# - name: Checkout - name: Checkout
# uses: actions/checkout@v6 uses: actions/checkout@v6
# - name: Set up Python - name: Set up Python
# uses: actions/setup-python@v6 uses: actions/setup-python@v6
# with: with:
# python-version: '3.14' python-version: '3.14'
# - name: Install GuardDog - name: Install uv
# run: pip install guarddog uses: astral-sh/setup-uv@v5
# - name: Run GuardDog - name: Install system dependencies
# run: | run: |
# guarddog npm scan . sudo apt-get update
sudo apt-get install -y libgit2-dev cmake
# - name: ntfy Failed - name: Run GuardDog
# uses: niniyas/ntfy-action@master run: |
# if: failure() uv run guarddog npm scan .
# with:
# url: '${{ secrets.NTFY_URL }}' - name: ntfy Failed
# topic: '${{ secrets.NTFY_TOPIC }}' uses: niniyas/ntfy-action@master
# title: 'Security Failure - Site Profile' if: failure()
# priority: 4 with:
# headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}' url: '${{ secrets.NTFY_URL }}'
# tags: action,failed topic: '${{ secrets.NTFY_TOPIC }}'
# details: 'Guarddog scan failed for Site Profile' title: 'Security Failure - Site Profile'
# icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png' priority: 4
# actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-profile/actions?workflow=test-build.yaml", "clear": true}]' headers: '{"Authorization": "Bearer ${{ secrets.NTFY_CRED }}"}'
# image: true tags: action,failed
details: 'Guarddog scan failed for Site Profile'
icon: 'https://cdn.jsdelivr.net/gh/selfhst/icons/png/gitea.png'
actions: '[{"action": "view", "label": "Open Gitea", "url": "https://gitea.alexlebens.dev/alexlebens/site-profile/actions?workflow=test-build.yaml", "clear": true}]'
image: true