self-hosted/woodpecker
1
0
Fork 0
mirror of https://github.com/woodpecker-ci/woodpecker.git synced 2025-02-04 18:21:06 +02:00
Code Issues Releases Activity
woodpecker/docs
History
Robert Kaussow e1a273d25d
Update docs deps to address cves (#2080) 
Related-to: https://github.com/woodpecker-ci/woodpecker/pull/2078

Remaining CVEs:

```
❯ trivy fs --exit-code 1 --skip-dirs node_modules/,plugins/woodpecker-plugins/node_modules/ docs/
2023-08-01T10:02:36.911+0200	INFO	Vulnerability scanning is enabled
2023-08-01T10:02:36.911+0200	INFO	Secret scanning is enabled
2023-08-01T10:02:36.911+0200	INFO	If your scanning is slow, please try '--scanners vuln' to disable secret scanning
2023-08-01T10:02:36.911+0200	INFO	Please see also https://aquasecurity.github.io/trivy/v0.43/docs/scanner/secret/#recommendation for faster secret detection
2023-08-01T10:02:36.963+0200	INFO	Number of language-specific files: 1
2023-08-01T10:02:36.963+0200	INFO	Detecting pnpm vulnerabilities...

pnpm-lock.yaml (pnpm)

Total: 2 (UNKNOWN: 0, LOW: 0, MEDIUM: 1, HIGH: 1, CRITICAL: 0)

┌─────────┬────────────────┬──────────┬───────────────────┬────────────────┬──────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability  │ Severity │ Installed Version │ Fixed Version  │                            Title                             │
├─────────┼────────────────┼──────────┼───────────────────┼────────────────┼──────────────────────────────────────────────────────────────┤
│ got     │ CVE-2022-33987 │ MEDIUM   │ 9.6.0             │ 11.8.5, 12.1.0 │ missing verification of requested URLs allows redirects to   │
│         │                │          │                   │                │ UNIX sockets                                                 │
│         │                │          │                   │                │ https://avd.aquasec.com/nvd/cve-2022-33987                   │
├─────────┼────────────────┼──────────┼───────────────────┼────────────────┼──────────────────────────────────────────────────────────────┤
│ trim    │ CVE-2020-7753  │ HIGH     │ 0.0.1             │ 0.0.3          │ nodejs-trim: Regular Expression Denial of Service (ReDoS) in │
│         │                │          │                   │                │ trim function                                                │
│         │                │          │                   │                │ https://avd.aquasec.com/nvd/cve-2020-7753                    │
└─────────┴────────────────┴──────────┴───────────────────┴────────────────┴──────────────────────────────────────────────────────────────┘
```

- `trim` is pulled in by `@docusaurus/theme-classic` and can be ignored
due to
https://github.com/facebook/docusaurus/issues/7275#issuecomment-1113997259
- `got` can be ignored as well, see `trim`
2023-08-01 13:30:44 +02:00
..
blog
Blog post for v1.0.0 release (#2055)
2023-07-29 16:05:44 +02:00
docs
Change master to main (#2044)
2023-07-31 05:47:23 +02:00
plugins/woodpecker-plugins
Update docs deps to address cves (#2080)
2023-08-01 13:30:44 +02:00
src
Fix docs nit and add rm todo for v1.2.0 (#2049)
2023-07-28 15:33:23 +02:00
static
Improve plugins index (#1200)
2022-09-25 19:04:47 +02:00
versioned_docs
Add breaking note for command: removal (#2056)
2023-07-29 14:52:43 +02:00
versioned_sidebars
Create docs for v1.0.x (#1855)
2023-07-25 12:41:58 +02:00
.gitignore
[Docs] Migrate docs framework to Docusaurus (#282)
2021-09-11 17:10:32 +02:00
.prettierrc.js
Improve docs (#450)
2021-10-16 21:27:51 +02:00
babel.config.js
[Docs] Migrate docs framework to Docusaurus (#282)
2021-09-11 17:10:32 +02:00
docusaurus.config.js
Change master to main (#2044)
2023-07-31 05:47:23 +02:00
LICENSE
Optimize license files (#355)
2021-09-25 15:15:54 +02:00
package.json
Update docs deps to address cves (#2080)
2023-08-01 13:30:44 +02:00
pnpm-lock.yaml
Update docs deps to address cves (#2080)
2023-08-01 13:30:44 +02:00
pnpm-workspace.yaml
Fix docs build (#1690)
2023-04-03 12:30:01 +02:00
README.md
Change master to main (#2044)
2023-07-31 05:47:23 +02:00
sidebars.js
[Docs] Migrate docs framework to Docusaurus (#282)
2021-09-11 17:10:32 +02:00
tsconfig.json
Improve docs (#450)
2021-10-16 21:27:51 +02:00
versions.json
Create docs for v1.0.x (#1855)
2023-07-25 12:41:58 +02:00

README.md

Website

This website is built using Docusaurus 2, a modern static website generator.

Installation

pnpm install

Local Development

pnpm start

This command starts a local development server and opens up a browser window. Most changes are reflected live without having to restart the server.

Build

pnpm build

This command generates static content into the build directory and can be served using any static contents hosting service.

Deployment

Deployment happen via CI to woodpecker-ci.org.

To manually build the website and push it exec:

GIT_USER=woodpecker-bot USE_SSH=true DEPLOYMENT_BRANCH=main pnpm deploy