ci: add repo secret

.trivyignore

@@ -1,3 +1,9 @@
 CVE-2024-4068
 CVE-2024-21538
 CVE-2024-21536
+CVE-2025-7783
+CVE-2024-29415
+CVE-2022-23539
+CVE-2022-24771
+CVE-2022-24772
+CVE-2024-29180

.woodpecker/build.yaml

@@ -3,6 +3,11 @@ when:
     branch: [master, feature/*]
 
 steps:
+  - name: trivy-scan
+    image: aquasec/trivy:latest
+    commands:
+      - trivy fs --scanners vuln,config --exit-code 1  --ignorefile .trivyignore --severity HIGH,CRITICAL frontend/
+
   - name: lint-frontend
     image: node:24
     commands:
@@ -10,27 +15,21 @@ steps:
       - npm install
       - npm run lint
 
-  - name: trivy-scan
-    image: aquasec/trivy:latest
-    commands:
-       - trivy fs --scanners vuln,config --exit-code 1  --severity HIGH,CRITICAL frontend/
-
-  - name: build-frontend
-    image: node:24
-    commands:
-      - cd frontend
-      - npm run build
-
   - name: build-and-publish
-    image: woodpeckerci/plugin-kaniko
+    image: woodpeckerci/plugin-docker-buildx
     settings:
-      registry: ${docker_registry}
-      repo: ${docker_registry}/taqi/portfolio
+      registry:
+        from_secret: docker_registry
+      repo:
+        from_secret: portfolio_docker_repo
       tags:
         - latest
         - 1.0.0-${CI_PIPELINE_NUMBER} # Ref: https://woodpecker-ci.org/docs/usage/environment
-      cache: true
       skip_tls_verify: false # set to true for testing registries ONLY with self-signed certs
       build_args:
         - COMMIT_SHA=${CI_COMMIT_SHA}
         - COMMIT_AUTHOR_EMAIL=${CI_COMMIT_AUTHOR_EMAIL}
+      username:
+        from_secret: docker-username
+      password:
+        from_secret: docker-password