Pandora's box

Organization to store public packages and their sources.

Pandora's box

This is an organization where publically available repositories, and corresponding packages, are put. It is free to use to anybody.

Naming convention

Each repository has a type and this is indicated in the name of the repository like an extension.

Suffix Description
.woodpecker Woodpecker CI plugin
.gopack Go module
.goapp Application written in Go
.template Repository template
.image-copy Sync contianer image to local registry
.workflows Workflow repository for the organization
.wptimers Cron job repository in Woodpecker CI for the organization

Pipelines

Pipelines are automatically created and run for each repository based on its extenstion. There are no .woodpecker directories in repositories. The pipelines can be found in pandora workflows repository.

Repository scanning

Regular scanning are running against each repo by renovate and trivy. Each repository has two issues that are always open:

  1. Dependency Dashboard: Report by renovate.
  2. Vulnerability dashboard: Report by trivy.
A woodpecker CI plugin which is verify workflow files.
Updated 2026-08-06 12:04:07 +00:00
Create summary about activities in the organization.
Updated 2026-07-28 18:10:57 +00:00
Non functional requirement checks for PRs
Updated 2026-07-28 18:06:49 +00:00
Woodpecker CI plugin to upload artifacts in the Forgejo generic registry.
Updated 2026-07-28 18:05:09 +00:00
Automatically create change log for the next release.
Updated 2026-07-28 18:01:24 +00:00