security: pin CI actions to commit SHAs

.gitea/workflows/check.yml

@@ -17,7 +17,7 @@ jobs:
           go-version-file: go.mod
 
       - name: Install golangci-lint
-        run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@5d1e709b7be35cb2025444e19de266b056b7b7ee # v2.10.1
+        run: go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.10.1
 
       - name: Run make check
         run: make check

.gitignore

@@ -18,7 +18,3 @@ vendor/
 # Data
 /data/
 *.sqlite3
-
-# Local dev configs
-config.yaml
-config.dev.yml

config.dev.yml

@@ -0,0 +1,11 @@
+# Development config for local Docker testing
+signing_key: "dev-signing-key-minimum-32-chars!"
+debug: true
+allow_http: true
+whitelist_hosts:
+  - localhost
+  - s3.sneak.cloud
+  - static.sneak.cloud
+  - sneak.berlin
+  - github.com
+  - user-images.githubusercontent.com

config.yaml

@@ -0,0 +1,10 @@
+debug: true
+port: 8080
+state_dir: ./data
+signing_key: "test-signing-key-for-development-only"
+whitelist_hosts:
+  - "*.example.com"
+  - "images.unsplash.com"
+  - "picsum.photos"
+  - "s3.sneak.cloud"
+allow_http: false