chore: disable pinDigests for slsa-github-generator

aquaproj · Jan 8, 2023 · 37190c2 · 37190c2
1 parent 07a971b
commit 37190c2
Show file tree

Hide file tree

Showing 3 changed files with 31 additions and 19 deletions.
diff --git a/.github/workflows/renovate-config-validator.yaml b/.github/workflows/renovate-config-validator.yaml
@@ -6,13 +6,13 @@ on:
     - main
     paths:
     - .github/workflows/renovate-config-validator.yaml
-    - renovate.json
+    - renovate.json5
   push:
     branches:
     - main
     paths:
     - .github/workflows/renovate-config-validator.yaml
-    - renovate.json
+    - renovate.json5
 
 jobs:
   validate:

diff --git a/renovate.json b/renovate.json
diff --git a/renovate.json5 b/renovate.json5
@@ -0,0 +1,29 @@
+{
+  "extends": [
+    "config:base",
+    "helpers:pinGitHubActionDigests"
+  ],
+  "automerge": true,
+  "packageRules": [
+    {
+      "postUpdateOptions": ["gomodTidy"],
+      "matchManagers": ["gomod"]
+    },
+    {
+      "automerge": false,
+      "matchUpdateTypes": ["major"]
+    },
+    {
+      // slsa-framework/slsa-github-generator doesn't support pinning version
+      // > Invalid ref: 68bad40844440577b33778c9f29077a3388838e9. Expected ref of the form refs/tags/vX.Y.Z
+      // https://github.com/slsa-framework/slsa-github-generator/issues/722
+      matchDepTypes: [
+        "action",
+      ],
+      matchPackageNames: [
+        "slsa-framework/slsa-github-generator",
+      ],
+      pinDigests: false,
+    },
+  ]
+}