refactor: simplify devguard target and processor logic

.github/workflows/devguard.yml

@@ -5,9 +5,11 @@ on:
   push:
 
 jobs:
-  devguard-scanner:
-    uses: l3montree-dev/devguard-action/.github/workflows/full.yml@main
-    with:
-        asset-name: "l3montree-cybersecurity/projects/devguard/assets/devguard-operator"
-    secrets:
-        devguard-token: ${{ secrets.DEVGUARD_TOKEN }} 
+    call-devsecops:
+        uses: l3montree-dev/devguard-action/.github/workflows/full.yml@main
+        with:
+            asset-name: "l3montree-cybersecurity/projects/devguard/assets/devguard-operator"
+            api-url: "https://api.main.devguard.org"
+            web-ui: "https://main.devguard.org"
+        secrets:
+            devguard-token: "${{ secrets.DEVGUARD_TOKEN }}" 

.gitignore

@@ -26,3 +26,4 @@ dist
 
 work
 /auth
+devguard-operator.yaml

.vscode/launch.json

@@ -0,0 +1,16 @@
+{
+    // Use IntelliSense to learn about possible attributes.
+    // Hover to view descriptions of existing attributes.
+    // For more information, visit: https://go.microsoft.com/fwlink/?linkid=830387
+    "version": "0.2.0",
+    "configurations": [
+
+        {
+            "name": "Launch Package",
+            "type": "go",
+            "request": "launch",
+            "mode": "auto",
+            "program": "."
+        }
+    ]
+}

Dockerfile

@@ -1,11 +1,11 @@
-FROM golang:1.23.4-alpine AS golang-builder
+FROM golang:1.26.4-alpine3.24@sha256:f1ddd9fe14fffc091dd98cb4bfa999f32c5fc77d2f2305ea9f0e2595c5437c14 AS golang-builder
 
 # set the working directory
 WORKDIR /app
 
 RUN apk add --no-cache curl git
 
-RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.54.1
+RUN curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | sh -s -- -b /usr/local/bin v0.71.1
 
 COPY . .
 

Makefile

@@ -1,2 +1,2 @@
 run:
-	go run ./main.go
+	go run .

config.go

@@ -12,9 +12,8 @@ type Config struct {
 	RegistryProxies    []string `yaml:"registryProxy" env:"SBOM_REGISTRY_PROXY" flag:"registryProxy"`
 	Verbosity          string   `env:"SBOM_VERBOSITY" flag:"verbosity"`
 
-	DevGuardToken       string `yaml:"devGuardToken" env:"DEVGUARD_TOKEN" flag:"token"`
-	DevGuardApiURL      string `yaml:"devGuardApiURL" env:"DEVGUARD_API_URL" flag:"apiUrl"`
-	DevGuardProjectName string `yaml:"devGuardProjectID" env:"DEVGUARD_PROJECT_NAME" flag:"projectName"`
+	DevGuardToken  string `yaml:"devGuardToken" env:"DEVGUARD_TOKEN" flag:"token"`
+	DevGuardProjectURL string `yaml:"devGuardProjectURL" env:"DEVGUARD_PROJECT_URL" flag:"projectUrl"`
 }
 
 var (
@@ -28,9 +27,8 @@ var (
 	ConfigKeyFallbackPullSecret = "fallbackPullSecret"
 	ConfigKeyRegistryProxy      = "registryProxy"
 
-	ConfigDevGuardToken       = "token"
-	ConfigDevGuardApiURL      = "apiUrl"
-	ConfigDevGuardProjectName = "projectName"
+	ConfigDevGuardToken  = "token"
+	ConfigDevGuardProjectURL = "projectUrl"
 
 	OperatorConfig *Config
 )

daemon.go

@@ -60,12 +60,6 @@ func (c *CronService) runBackgroundService() {
 	slog.Info("Execute background-service")
 
 	for _, t := range c.processor.Targets {
-		err := t.Initialize()
-		if err != nil {
-			slog.Error("Target could not be initialized", "err", err)
-			continue
-		}
-
 		t.LoadImages()
 	}