Pandora's box

This is an organization where publically available repositories, and corresponding packages, are put. It is free to use to anybody.

Naming convention

Each repository has a type and this is indicated in the name of the repository like an extension.

Suffix	Description
.woodpecker	Woodpecker CI plugin
.setup	Not a package but a side repository that run management related functions
.gopack	Go module
.goapp	Application written in Go
.template	Repository template
.image-copy	Sync contianer image to local registry

Pipelines

Pipelines are automatically created and run for each repository based on its extenstion. There are no .woodpecker directories in repositories. The pipelines can be found in woodpecker-config-server.goapp repository.

Repository scanning

Regular scanning are running against each repo by renovate and trivy. Each repository has two issues that are always open:

1. Dependency Dashboard: Report by renovate.
2. Vulnerability dashboard: Report by trivy.