Pandora's box
Organization to store public packages and their sources.
Pandora's box
This is an organization where publically available repositories, and corresponding packages, are put. It is free to use to anybody.
Naming convention
Each repository has a type and this is indicated in the name of the repository like an extension.
| Suffix | Description |
|---|---|
.woodpecker |
Woodpecker CI plugin |
.setup |
Not a package but a side repository that run management related functions |
.gopack |
Go module |
.goapp |
Application written in Go |
.template |
Repository template |
.image-copy |
Sync contianer image to local registry |
.workflows |
Workflow repository for the organization |
.wptimers |
Cron job repository in Woodpecker CI for the organization |
Pipelines
Pipelines are automatically created and run for each repository based on its extenstion. There are no .woodpecker directories in repositories.
The pipelines can be found in woodpecker-config-server.goapp repository.
Repository scanning
Regular scanning are running against each repo by renovate and trivy. Each repository has two issues that are always open:
Dependency Dashboard: Report by renovate.Vulnerability dashboard: Report by trivy.