Commit Graph

203 Commits

Author SHA1 Message Date
7726c3f386 Update Nextcloud 24.0.10 2023-02-23 21:19:17 +01:00
5906c3ea91 Update Nextcloud to 24.0.9 2023-01-17 10:41:46 +01:00
89f2aacb32 Update Nextcloud to 24.0.8 2022-12-08 15:27:39 +01:00
1365e7a046 update cosign 2022-11-03 18:43:32 +01:00
49d7a7a469 Update to 24.0.7 2022-11-03 18:35:14 +01:00
183fb4b9df Create new version branch 2022-10-18 17:02:37 +02:00
66f1ca8176 Update Nextcloud to 24.0.6 2022-10-06 14:52:36 +02:00
1a6ce671a6 Update Nextcloud to 24.0.5 2022-09-09 09:47:56 +02:00
49eca961a8 Update Shufflepagus to 0.8.3 2022-09-09 09:46:17 +02:00
05f056644a fix: use correct tar.bz2 checksum 2022-08-12 08:44:28 +02:00
41b50052f4 chore: update Nextcloud to 24.0.4 2022-08-12 08:14:48 +02:00
57409ee693 Update to 24.0.3 2022-07-19 19:01:02 +02:00
e850f6a1df Update Nextcloud to 24.0.2 2022-06-21 00:00:51 +02:00
251903fd3d Update cosign 2022-06-08 00:41:49 +02:00
5ef63c0bb3 Update Alpine and dependencies 2022-06-08 00:01:17 +02:00
6eb2fac3a4 Snuffleupagus 0.8.1 2022-05-20 13:33:12 +02:00
4f1e5c1b7f Update to PHP 8.1 2022-05-20 13:32:35 +02:00
9c8feeb088 Update to 24.0.1 2022-05-20 13:17:32 +02:00
f194e4b319 Use GITHUB_TOKEN for authentication again
was overriden by upstream sync
2022-05-06 09:46:11 +02:00
3c945d7ee7 snuffleupagus: Add exception rule for Nextcloud 2022-05-06 09:26:00 +02:00
7a377af96a Merge branch 'version-24-testing' 2022-05-05 21:58:51 +02:00
7905e3a7c4 Update to Nextcloud 24.0.0 2022-05-05 21:57:09 +02:00
425b04ad03 Update README.md and SECURITY.md 2022-05-05 21:56:17 +02:00
79d99eb02f iconv workaround no longer needed
Official PHP image now includes it by default for Alpine
2022-05-05 08:34:33 +02:00
0b3b86dfff snuffleupagus: fix basic settings on new installs 2022-05-05 08:34:20 +02:00
a906f113b5 Update SECURITY.md 2022-05-05 08:31:30 +02:00
1ffd446214 ensure JIT is disabled
It was disabled by default (jit_buffer_size=0 by default), but this setting makes sure JIT is unavailable at runtime. While JIT may bring minor performance improvements, this is not worth the risk of being exposed to tons of bugs due to JIT code complexity.
2022-05-05 08:31:10 +02:00
8c11184ba1 follow OCI spec for labels 2022-05-05 08:30:45 +02:00
2c662e7862 snuffleupagus: fix broken "Basic settings" access 2022-05-05 08:29:46 +02:00
f7aded2aeb chown not necessary here 2022-05-05 08:28:41 +02:00
9a30d0ff02 snuffleupagus: enable sloppy_comparison 2022-05-05 08:28:32 +02:00
33dc46def2 snuffleupagus: enable global_strict 2022-05-05 08:28:21 +02:00
7974e54491 support and enable snuffleupagus 2022-05-05 08:25:52 +02:00
6e8e9619ed add note about signed images 2022-05-05 08:24:32 +02:00
eceef9c4ac fix setup: do not wait for db if using sqlite3 2022-05-05 08:24:05 +02:00
bce0750e6e refactor build workflow, support signing 2022-05-05 08:23:13 +02:00
d451bcf1ef mention gpg key user id 2022-05-05 07:50:40 +02:00
2ac3ec67f2 proper integrity check 2022-05-05 07:50:09 +02:00
df476c0dc4 remove unused build-time variables
we always use the latest anyway
2022-05-05 07:49:41 +02:00
7611471834 disable legacy X-XSS-Protection
Obsolete, unsafe, and superseded by CSP
2022-05-05 07:48:42 +02:00
125ea0a2f6 Update to 23.0.4 (Closes: #13) 2022-04-21 23:26:14 +02:00
feae76b13a Update Nextcloud to 23.0.3 2022-03-21 23:25:42 +01:00
51912688d2 Update Nextcloud to 23.0.2 2022-02-15 20:44:48 +01:00
9fbe35460b Update Nextcloud to 23.0.1 2022-01-27 21:07:18 +01:00
bc89ff25ed Update hardened_malloc to 11 2022-01-27 19:56:15 +01:00
d3bfe95eb4 use light variant of hardened malloc
Much lower memory usage, remains security-focused
2022-01-17 10:46:41 +01:00
beab287fc4 Update hardened malloc to 10 2022-01-13 20:05:21 +01:00
b839ac7838 Use github.actor also for trivy step 2022-01-13 19:38:14 +01:00
9851eb52ee waiting for the database container on setup 2022-01-13 19:35:53 +01:00
9b0a84a36f Also use github.actor for the scan workfow 2021-12-08 21:25:40 +01:00