From 70363033c159a5a68e13a64251a3834d7136200c Mon Sep 17 00:00:00 2001 From: official-Cromatin Date: Sun, 28 Sep 2025 18:26:48 +0200 Subject: [PATCH 1/7] Add docker-build task and update .gitignore --- .gitignore | 2 +- .vscode/tasks.json | 15 +++++++++++++++ 2 files changed, 16 insertions(+), 1 deletion(-) create mode 100644 .vscode/tasks.json diff --git a/.gitignore b/.gitignore index 6a67833..41d1c7a 100644 --- a/.gitignore +++ b/.gitignore @@ -5,7 +5,7 @@ pastebin.txt .DS_Store test*.py docker-* -.vscode +.vscode/settings.json # Byte-compiled / optimized / DLL files diff --git a/.vscode/tasks.json b/.vscode/tasks.json new file mode 100644 index 0000000..f41c7c1 --- /dev/null +++ b/.vscode/tasks.json @@ -0,0 +1,15 @@ +{ + "version": "2.0.0", + "tasks": [ + { + "label": "Docker: Build Image", + "type": "docker-build", + "platform": "python", + "dockerBuild": { + "context": "${workspaceFolder}", + "dockerfile": "${workspaceFolder}/Dockerfile", + "tag": "post-it:dev" + } + } + ] +} From 6967fa5358c582e51a05afdf3e34687d962c11b0 Mon Sep 17 00:00:00 2001 From: official-Cromatin Date: Wed, 1 Oct 2025 15:03:10 +0200 Subject: [PATCH 2/7] Add task to run and attach to docker container --- .vscode/tasks.json | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/.vscode/tasks.json b/.vscode/tasks.json index f41c7c1..c8c52da 100644 --- a/.vscode/tasks.json +++ b/.vscode/tasks.json @@ -10,6 +10,27 @@ "dockerfile": "${workspaceFolder}/Dockerfile", "tag": "post-it:dev" } + }, + { + "label": "Run post-it (interactive, show logs)", + "type": "shell", + "dependsOn": ["Docker: Build Image"], + "command": "docker", + "args": [ + "run", + "--rm", + "-it", + "--name", + "post-it-dev", + "-v", + "${workspaceFolder}/config:/app/config", + "post-it:dev" + ], + "presentation": { + "reveal": "always", + "panel": "shared" + }, + "problemMatcher": [] } ] } From 0db5d4d31c62348179b302ce52509f13c3a806f8 Mon Sep 17 00:00:00 2001 From: official-Cromatin Date: Wed, 8 Oct 2025 15:17:04 +0200 Subject: [PATCH 3/7] Add ruff task to run on push and pull_request Source: https://docs.astral.sh/ruff/integrations/#github-actions --- .github/workflows/ruff.yml | 9 +++++++++ 1 file changed, 9 insertions(+) create mode 100644 .github/workflows/ruff.yml diff --git a/.github/workflows/ruff.yml b/.github/workflows/ruff.yml new file mode 100644 index 0000000..d79e6d0 --- /dev/null +++ b/.github/workflows/ruff.yml @@ -0,0 +1,9 @@ +name: Linting (Ruff) + +on: [push, pull_request] +jobs: + ruff: + runs-on: self-hosted + steps: + - uses: actions/checkout@v4 + - uses: astral-sh/ruff-action@v3 From 818f4dfdae0a67696e92f84a13b731493d4c1bed Mon Sep 17 00:00:00 2001 From: official-Cromatin Date: Wed, 8 Oct 2025 15:51:45 +0200 Subject: [PATCH 4/7] Remove renovate workflow --- .github/renovate-entrypoint.sh | 13 ------------- .github/workflows/renovate.yml | 33 --------------------------------- 2 files changed, 46 deletions(-) delete mode 100644 .github/renovate-entrypoint.sh delete mode 100644 .github/workflows/renovate.yml diff --git a/.github/renovate-entrypoint.sh b/.github/renovate-entrypoint.sh deleted file mode 100644 index 6820a24..0000000 --- a/.github/renovate-entrypoint.sh +++ /dev/null @@ -1,13 +0,0 @@ -#!/bin/bash -set -euo pipefail - -echo "=== Starting Renovate Bot ===" - -cd /github/workspace - -apt update -apt install -y build-essential libpq-dev - -runuser -u ubuntu -- renovate --platform=github - -echo "=== Renovate Bot finished ===" diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml deleted file mode 100644 index f705a65..0000000 --- a/.github/workflows/renovate.yml +++ /dev/null @@ -1,33 +0,0 @@ -name: Renovate - -on: - workflow_dispatch: - schedule: - - cron: '0 2 * * 1' - -permissions: - contents: write - pull-requests: write - -jobs: - renovate: - runs-on: self-hosted - steps: - - name: Checkout Repository - uses: actions/checkout@v4 - - - name: Setup Node.js - uses: actions/setup-node@v3 - with: - node-version: '20' - - - name: Install Renovate - run: npm install -g renovate - - - name: Run Renovate - env: - RENOVATE_TOKEN: ${{ secrets.GITHUB_TOKEN }} - LOG_LEVEL: debug - run: | - cd ${{ github.workspace }} - renovate --platform=github --repositories "${{ github.repository }}" From 467aebc3afc047f5ef983cc2acf1c0ede020350e Mon Sep 17 00:00:00 2001 From: official-Cromatin Date: Wed, 8 Oct 2025 16:02:41 +0200 Subject: [PATCH 5/7] Add bandit task to run on push --- .github/workflows/bandit.yml | 15 +++++++++++++++ 1 file changed, 15 insertions(+) create mode 100644 .github/workflows/bandit.yml diff --git a/.github/workflows/bandit.yml b/.github/workflows/bandit.yml new file mode 100644 index 0000000..363e39d --- /dev/null +++ b/.github/workflows/bandit.yml @@ -0,0 +1,15 @@ +name: Code Analysis (Bandit) + +on: push +jobs: + bandit: + runs-on: self-hosted + steps: + - uses: actions/checkout@v4 + - uses: mdegis/bandit-action@v1.0 + with: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + path: "src/" + level: high + confidence: high + exit_zero: true From 917e90b48b54403857f3bb06e704f71c9848ac52 Mon Sep 17 00:00:00 2001 From: official-Cromatin Date: Thu, 9 Oct 2025 10:54:13 +0200 Subject: [PATCH 6/7] Remove renovate.json --- renovate.json | 14 -------------- 1 file changed, 14 deletions(-) delete mode 100644 renovate.json diff --git a/renovate.json b/renovate.json deleted file mode 100644 index 66368f2..0000000 --- a/renovate.json +++ /dev/null @@ -1,14 +0,0 @@ -{ - "extends": ["config:base"], - "labels": ["dependencies", "renovate"], - "packageRules": [ - { - "managers": ["pip_requirements"], - "updateTypes": ["minor", "patch"], - "automerge": false, - "groupName": "Python dependencies" - } - ], - "prConcurrentLimit": 5, - "prHourlyLimit": 2 -} From a41a483041914037acb6bd2e7607f588ab6d64b5 Mon Sep 17 00:00:00 2001 From: official-Cromatin Date: Mon, 8 Dec 2025 14:41:34 +0100 Subject: [PATCH 7/7] Change runner type from self-hosted to ubuntu-latest --- .github/workflows/bandit.yml | 2 +- .github/workflows/release-docker.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/bandit.yml b/.github/workflows/bandit.yml index 363e39d..c1adbb3 100644 --- a/.github/workflows/bandit.yml +++ b/.github/workflows/bandit.yml @@ -3,7 +3,7 @@ name: Code Analysis (Bandit) on: push jobs: bandit: - runs-on: self-hosted + runs-on: ubuntu-latest steps: - uses: actions/checkout@v4 - uses: mdegis/bandit-action@v1.0 diff --git a/.github/workflows/release-docker.yml b/.github/workflows/release-docker.yml index 5bee13b..f9aa64f 100644 --- a/.github/workflows/release-docker.yml +++ b/.github/workflows/release-docker.yml @@ -10,7 +10,7 @@ permissions: jobs: build-and-push-docker: - runs-on: self-hosted + runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@v4