Continuous Integration templates for Security and Quality. These snippets are steps to automatically check security and quality in your projects.
- Lint your commit messages with commitlint
- Lint your workflow files with actionlint and zizmor
- Pin your Github actions by commit with action-pin
- Check commit signature in PR with check-signed-commits-action
- Lint your dockerfile with hadolint
Tip
you could add exception on a particular line of your dockerfile with # hadolint ignore=DL3041
- Test your dockerfile security with trivy
- Lint your charts with helm lint
- Test broken links in markdown with linkchecker