ci: add repo secret

.trivyignore

@@ -0,0 +1,9 @@
+CVE-2024-4068
+CVE-2024-21538
+CVE-2024-21536
+CVE-2025-7783
+CVE-2024-29415
+CVE-2022-23539
+CVE-2022-24771
+CVE-2022-24772
+CVE-2024-29180

.woodpecker/build.yaml

@@ -3,6 +3,11 @@ when:
     branch: [master, feature/*]
 
 steps:
+  - name: trivy-scan
+    image: aquasec/trivy:latest
+    commands:
+      - trivy fs --scanners vuln,config --exit-code 1  --ignorefile .trivyignore --severity HIGH,CRITICAL frontend/
+
   - name: lint-frontend
     image: node:24
     commands:
@@ -10,27 +15,21 @@ steps:
       - npm install
       - npm run lint
 
-  - name: trivy-scan
-    image: aquasec/trivy:latest
-    commands:
-      - trivy fs --scanners vuln,config --exit-code 1 --severity HIGH,CRITICAL frontend/
-
-  - name: build-frontend
-    image: node:24
-    commands:
-      - cd frontend
-      - npm run build
-
   - name: build-and-publish
-    image: woodpeckerci/plugin-kaniko
+    image: woodpeckerci/plugin-docker-buildx
     settings:
-      registry: ${docker_registry}
-      repo: ${docker_registry}/taqi/portfolio
+      registry:
+        from_secret: docker_registry
+      repo:
+        from_secret: portfolio_docker_repo
       tags:
         - latest
         - 1.0.0-${CI_PIPELINE_NUMBER} # Ref: https://woodpecker-ci.org/docs/usage/environment
-      cache: true
       skip_tls_verify: false # set to true for testing registries ONLY with self-signed certs
       build_args:
         - COMMIT_SHA=${CI_COMMIT_SHA}
         - COMMIT_AUTHOR_EMAIL=${CI_COMMIT_AUTHOR_EMAIL}
+      username:
+        from_secret: docker-username
+      password:
+        from_secret: docker-password

frontend/package.json

@@ -36,6 +36,9 @@
     "tailwindcss": "^3.4.11",
     "typescript": "^5.5.3",
     "typescript-eslint": "^8.0.1",
-    "vite": "^5.4.1"
+    "vite": "^7.0.6"
+  },
+  "overrides": {
+    "@types/minimatch": "5.1.2"
   }
 }

frontend/tsconfig.app.tsbuildinfo

@@ -1 +1 @@
-{"root":["./src/App.tsx","./src/constants.tsx","./src/main.tsx","./src/vite-env.d.ts","./src/components/Footer.tsx","./src/components/Introduction.tsx","./src/components/Navbar.tsx","./src/components/Photo.tsx","./src/components/Sidebar.tsx","./src/components/Skills.tsx","./src/components/Tooltip.tsx","./src/pages/Experience.tsx","./src/pages/Home.tsx","./src/pages/Interests.tsx","./src/pages/Projects.tsx"],"version":"5.6.2"}
+{"root":["./src/App.tsx","./src/constants.tsx","./src/main.tsx","./src/vite-env.d.ts","./src/components/Footer.tsx","./src/components/Introduction.tsx","./src/components/Navbar.tsx","./src/components/Photo.tsx","./src/components/Sidebar.tsx","./src/components/Skills.tsx","./src/components/Tooltip.tsx","./src/pages/Experience.tsx","./src/pages/Home.tsx","./src/pages/Interests.tsx","./src/pages/Projects.tsx"],"version":"5.8.3"}

frontend/tsconfig.node.tsbuildinfo

@@ -1 +1 @@
-{"root":["./vite.config.ts"],"version":"5.6.2"}
+{"root":["./vite.config.ts"],"version":"5.8.3"}