3 Commits
Author SHA1 Message Date
Djeex 8c53ba4c79 Publish images to GHCR and releases to the GitHub mirror
CI / build-and-scan (pull_request) Successful in 57s
- retag+push the same :latest/:X.Y/:X.Y.Z tags to ghcr.io/djeex/socat-proxy
- create a matching GitHub Release on the Djeex/socat-proxy mirror, same changelog
  body prefixed with a notice pointing back to the git.djeex.fr source repo
- targets the exact commit SHA (not the branch) with retries, since the
  Gitea->GitHub push mirror can lag behind this job
- requires a new GH_TOKEN secret (repo + write:packages) — not created yet
- first GHCR push per repo will be private by default; GitHub has no API to
  default it public for a personal account, needs a one-time manual toggle
2026-08-26 15:04:28 +02:00
Djeex adf4e8c8a3 Add secret scanning, Dockerfile lint, and automatic CVE remediation PRs
- gitleaks (via docker cp, dockerignore-agnostic — this repo's own
  .dockerignore excludes .git, which a build-context COPY would have missed)
  and hadolint scan every push/PR
- scheduled Trivy critical failures now attempt an apk upgrade rebuild and open
  a PR if it clears the finding, instead of just failing red
- no ruff/pytest-cov here (shell project, already has shellcheck/bats)
2026-08-26 14:49:32 +02:00
Djeex ada76ac00d Simplify release changelog: commits as description (link), drop divider lines 2026-08-26 13:54:24 +02:00
3 changed files with 3 additions and 7 deletions
+1 -1
View File
@@ -1 +1 @@
1.1.1
1.1.0
+1 -1
View File
@@ -145,7 +145,7 @@ fi
log "[~] Testing connection to target..."
# Test if we can reach the target before starting socat
if ! nc -z -w 2 "$TARGET_HOST" "$TARGET_PORT" 2>/dev/null; then
if ! nc -z "$TARGET_HOST" "$TARGET_PORT" 2>/dev/null; then
log "[!] Cannot connect to $TARGET_HOST:$TARGET_PORT - socat will retry automatically"
else
log "[✓] Connection to $TARGET_HOST:$TARGET_PORT is working"
+1 -5
View File
@@ -58,11 +58,7 @@ socat_pid() {
wait_for_log() {
pattern="$1"
tries=0
# 40 * 0.25s = 10s — merge-triggered runs can land on a cold runner
# (evicted Docker cache, first container start), pushing the very first
# backgrounded entrypoint.sh past a tighter budget even though nothing's
# actually wrong; a rerun on a warm runner always passes.
while [ "$tries" -lt 40 ]; do
while [ "$tries" -lt 20 ]; do
grep -qE "$pattern" "$LOG" 2>/dev/null && return 0
tries=$((tries + 1))
sleep 0.25