renovate.json

{
  "separateMajorMinor": false,
  "packageRules": [
    {
      "matchPackagePatterns": ["*"],
      "groupName": "docker dependencies",
      "groupSlug": "Docker",
      "enabled": true
    }
  ],
  "regexManagers": [
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": [
        "FROM artifactory.cloud.cms.gov/docker/golang:(?<currentValue>\\S+)"
      ],
      "depNameTemplate": "registry.hub.docker.com/library/golang",
      "datasourceTemplate": "docker",
      "versioningTemplate": "regex:^(?<compatability>alpine)(?<major>\\d+)\\.(?<minor>\\d+)(\\.(?<patch>\\d+))?"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": [
        "FROM artifactory.cloud.cms.gov/docker/alpine:(?<currentValue>\\S+)"
      ],
      "depNameTemplate": "registry.hub.docker.com/library/alpine",
      "datasourceTemplate": "docker",
      "versioningTemplate": "regex:^(?<major>\\d+)\\.(?<minor>\\d+)(\\.(?<patch>\\d+))?"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": [
        "FROM artifactory.cloud.cms.gov/docker/rust:(?<currentValue>\\S+)"
      ],
      "depNameTemplate": "registry.hub.docker.com/library/rust",
      "datasourceTemplate": "docker",
      "versioningTemplate": "regex:^(?<compatability>alpine)(?<major>\\d+)\\.(?<minor>\\d+)(\\.(?<patch>\\d+))?"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": ["ARG GRYPE_VERSION=(?<currentValue>\\S+)"],
      "depNameTemplate": "anchore/grype",
      "datasourceTemplate": "github-tags",
      "versioningTemplate": "regex:^(?<compatibility>.*)(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": ["ARG SYFT_VERSION=(?<currentValue>\\S+)"],
      "depNameTemplate": "anchore/syft",
      "datasourceTemplate": "github-tags",
      "versioningTemplate": "regex:^(?<compatibility>.*)(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": ["ARG GITLEAKS_VERSION=(?<currentValue>\\S+)"],
      "depNameTemplate": "gitleaks/gitleaks",
      "datasourceTemplate": "github-tags",
      "versioningTemplate": "regex:^(?<compatibility>.*)(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": ["ARG COSIGN_VERSION=(?<currentValue>\\S+)"],
      "depNameTemplate": "sigstore/cosign",
      "datasourceTemplate": "github-tags",
      "versioningTemplate": "regex:^(?<compatibility>.*)(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": ["ARG CRANE_VERSION=(?<currentValue>\\S+)"],
      "depNameTemplate": "google/go-containerregistry",
      "datasourceTemplate": "github-tags",
      "versioningTemplate": "regex:^(?<compatibility>.*)(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": ["ARG RELEASE_CLI_VERSION=(?<currentValue>\\S+)"],
      "depNameTemplate": "gitlab-org/release-cli",
      "datasourceTemplate": "gitlab-tags",
      "versioningTemplate": "regex:^(?<compatibility>.*)(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": ["ARG GATECHECK_VERSION=(?<currentValue>\\S+)"],
      "depNameTemplate": "gatecheckdev/gatecheck",
      "datasourceTemplate": "github-tags",
      "versioningTemplate": "regex:^(?<compatibility>.*)(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": ["ARG S3UPLOAD_VERSION=(?<currentValue>\\S+)"],
      "depNameTemplate": "bacchusjackson/go-s3-upload",
      "datasourceTemplate": "github-tags",
      "versioningTemplate": "regex:^(?<compatibility>.*)(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": ["ARG SEMGREP_VERSION=(?<currentValue>\\S+)"],
      "depNameTemplate": "semgrep/semgrep",
      "datasourceTemplate": "github-tags",
      "versioningTemplate": "regex:^(?<compatibility>.*)(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)"
    },
    {
      "fileMatch": ["^Dockerfile$"],
      "matchStrings": ["ARG OMNIBUS_VERSION=(?<currentValue>\\S+)"],
      "depNameTemplate": "devops-pipelines/pipeline-tools/omnibus",
      "datasourceTemplate": "gitlab-tags",
      "versioningTemplate": "regex:^(?<compatibility>.*)(?<major>\\d+)\\.(?<minor>\\d+)\\.(?<patch>\\d+)"
    }
  ]
}