feat: initial commit

---

exclude_paths:

  - ".gitlab/*"

  - ".gitlab-ci.yml"

  - "defaults/main.yaml"

  - "meta/main.yaml"

  - "vars/*"

kinds:

  - playbook: "**/*.{yml,yaml}"

skip_list:

  - "command-shell"

  - "experimental"

  - "git-latest"

  - "no-changed-when"

  - "no-handler"

  - "name[casing]"

  - "name[template]"

  - "risky-file-permissions"

  - "schema[playbook]"

  - "var-naming[no-role-prefix]"

.ansible

---

# gitLab ci stages

stages:

  # deployment

  - "gitleaks"

  - "linting"

# include jobs

include:

  # deployment

  - local: ".gitlab/gitleaks.yaml"

  # linting

  - component: "$CI_SERVER_FQDN/components/ansible/linting@v3.0.3"

  - component: "$CI_SERVER_FQDN/components/markdownlint/markdownlint@1.0.0"

  - component: "$CI_SERVER_FQDN/components/yamllint/yamllint@1.0.2"

---

# gitleaks

gitleaks:

  stage: "gitleaks"

  image:

    name: "ghcr.io/gitleaks/gitleaks:latest"

  variables:

    GIT_DEPTH: 1

  rules:

    # run only on push to default branch

    - if: '$CI_PIPELINE_SOURCE == "push" && $CI_COMMIT_BRANCH == $CI_DEFAULT_BRANCH'

    - when: "never"

  # start linting

  script:

    - "gitleaks detect --source . --verbose --redact"

{

  // files to lint

  "globs": [

    "readme.md"

  ],

  // linting rules

  "config": {

    "MD013": {

      "line_length": 120

    }

  }

}