From 8f1c6a5b6eeee7e504f77b3f968e0ad296fb48a0 Mon Sep 17 00:00:00 2001 From: Ruben Hensen Date: Sun, 25 Oct 2026 04:33:01 +0100 Subject: [PATCH] docs: record the repo rules --- docs/roadmap.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/docs/roadmap.md b/docs/roadmap.md index 85aa6e1..d5fd3d1 100644 --- a/docs/roadmap.md +++ b/docs/roadmap.md @@ -288,7 +288,12 @@ PR before Argo CD applies it. `apps/templates/snapshot-controller-helm.yaml` (once with `prune: true`, added 2025-03-03); Argo CD kept the last one, without prune. Now listed once, as it ran. Prune was probably meant; turn it on deliberately if so -- [ ] conftest for this repo's own rules +- [x] This repo's own rules, in `tools/ci/validate.py` rather than + conftest (2026-10-25), on what the repo's own folders render: no Secret + with data in git, and every image has a tag other than latest (both + fail the run; tested with a planted Secret and an untagged image), plus + PR annotations for containers without requests or probes. freshrss's + `alpine/git` init container had no tag; now `v2.52.0` - [ ] Automerge patch versions of low-risk apps now that CI runs - [x] Renovate listed external-snapshotter twice (#15 and #24): its `argocd` manager and a custom `github-tags` regex both matched. The