Update CI to tidy itself and use DeepSource (#48)

.deepsource.toml

@@ -1,4 +1,7 @@
 version = 1
 
+[[analyzers]]
+name = "ruby"
+
 [[analyzers]]
 name = "secrets"

.github/workflows/build.yml

@@ -1,12 +1,13 @@
-name: Build
+name: "Auto/Trigger: Build & Push"
+
 on:
   push:
     branches: [ main ]
   workflow_dispatch:
 
 env:
-  REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository }}
+  REGISTRY: ghcr.io
 
 jobs:
   docker-build:
@@ -18,9 +19,9 @@ jobs:
     - uses: actions/checkout@v3
     - uses: docker/login-action@v2
       with:
+        password: ${{ secrets.GITHUB_TOKEN }}
         registry: ${{ env.REGISTRY }}
         username: ${{ github.actor }}
-        password: ${{ secrets.GITHUB_TOKEN }}
     - uses: docker/metadata-action@v4
       id: meta
       with:
@@ -29,5 +30,5 @@ jobs:
       with:
         context: .
         push: true
-        tags: ${{ steps.meta.outputs.tags }}
-        labels: ${{ steps.meta.outputs.labels }}
+        tags: ${{ steps.meta.outputs.TAGS }}
+        labels: ${{ steps.meta.outputs.LABELS }}

.github/workflows/delete_old_packages.yml

@@ -0,0 +1,17 @@
+name: "Daily/Trigger: Delete Old Packages"
+
+on:
+  schedule:
+    - cron: "0 5 * * *" # 5am UTC daily (11pm/12am CT)
+  workflow_dispatch:
+
+jobs:
+  delete-old-packages:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/delete-package-versions@v4
+        with:
+          delete-only-untagged-versions: 'true'
+          min-versions-to-keep: 5
+          package-name: ${{ github.event.repository.name }}
+          package-type: container

.github/workflows/test.yml

@@ -1,65 +1,24 @@
-name: Test
+name: "Auto: Test"
+
 on:
-  push:
-    branches: [ main ]
   pull_request:
     branches: [ main ]
-
-env:
-  GITLEAKS_VERSION: v8.15.1
+  push:
+    branches: [ main ]
 
 jobs:
   test:
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
       matrix:
-        ruby: [2.6, 2.7, 3.0, 3.1, 3.2]
+        RUBY: [ 2.6, 2.7, 3.0, 3.1, 3.2 ]
     steps:
     - uses: actions/checkout@v3
       with:
         fetch-depth: 0
     - uses: ruby/setup-ruby@v1
       with:
-        ruby-version: ${{ matrix.ruby }}
         bundler-cache: true
+        ruby-version: ${{ matrix.RUBY }}
     - run: bundle exec rake
-  pronto:
-    if: github.EVENT_NAME == 'pull_request'
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v3
-      with:
-        fetch-depth: 0
-    - uses: HeRoMo/[email protected]
-      with:
-        github_token: ${{ secrets.GITHUB_TOKEN }}
-  gitleaks:
-    if: github.EVENT_NAME == 'pull_request'
-    runs-on: ubuntu-latest
-    steps:
-    - uses: actions/checkout@v3
-      with:
-        fetch-depth: 0
-    - run: |
-        curl -H "Accept: application/vnd.github.v3.raw" \
-          -L "https://api.github.com/repos/zricethezav/gitleaks/contents/config/gitleaks.toml?ref=${{ env.GITLEAKS_VERSION }}" \
-          >> ${{ github.WORKSPACE }}/.github/workflows/original.toml
-        sed "/\[allowlist\]/,/^$/d" ${{ github.WORKSPACE }}/.github/workflows/original.toml >> ${{ github.WORKSPACE }}/.github/workflows/official.toml
-        cat .github/workflows/gitleaks.toml >> .github/workflows/official.toml
-        if [[ ${{ github.REF }} == 'refs/heads/main' ]]; then
-          CURRENT_COMMIT="${{ github.SHA }}"
-        else
-          CURRENT_COMMIT="${{ github.EVENT.PULL_REQUEST.HEAD.SHA }}"
-        fi
-        echo "LOG_OPTS='^origin/main $CURRENT_COMMIT'" >> $GITHUB_ENV
-    - uses: addnab/docker-run-action@v3
-      with:
-        image: zricethezav/gitleaks:${{ env.GITLEAKS_VERSION }}
-        options: -v ${{ github.WORKSPACE }}:/app
-        run: |
-          cd /app
-          git config --global --add safe.directory /app
-          gitleaks detect --verbose --source='./' \
-            --config='.github/workflows/official.toml' \
-            --log-opts=${{ env.LOG_OPTS }}