Mirror/gitea-mirror
1
0
Fork 0
mirror of https://github.com/RayLabsHQ/gitea-mirror.git synced 2025-12-11 05:56:46 +03:00
Code Issues Packages Projects Releases Wiki Activity

fix: update Docker Scout image references and add wait step for image availability

Browse Source
This commit is contained in:
Arunavo Ray
2025-06-15 14:43:31 +05:30
parent 7f7e510400
commit 9e2285d614
1 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
.github/workflows/docker-build.yml vendored
View File

@@ -104,13 +104,20 @@ jobs:
cache-from: type=gha cache-from: type=gha
cache-to: type=gha,mode=max cache-to: type=gha,mode=max
# Wait for image to be available in registry
- name: Wait for image availability
if: github.event_name != 'pull_request'
run: |
echo "Waiting for image to be available in registry..."
sleep 5
# Docker Scout comprehensive security analysis # Docker Scout comprehensive security analysis
- name: Docker Scout - Vulnerability Analysis & Recommendations - name: Docker Scout - Vulnerability Analysis & Recommendations
uses: docker/scout-action@v1 uses: docker/scout-action@v1
if: github.event_name != 'pull_request' if: github.event_name != 'pull_request'
with: with:
command: cves,recommendations command: cves,recommendations
image: ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ env.SHA }} image: ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest
sarif-file: scout-results.sarif sarif-file: scout-results.sarif
summary: true summary: true
exit-code: true exit-code: true
@@ -138,7 +145,7 @@ jobs:
if: github.event_name == 'pull_request' if: github.event_name == 'pull_request'
with: with:
command: compare command: compare
image: ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ env.SHA }} image: local://gitea-mirror:scan
to: ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest to: ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest
ignore-unchanged: true ignore-unchanged: true
only-severities: critical,high only-severities: critical,high
@@ -155,10 +162,10 @@ jobs:
# Docker Scout policy evaluation # Docker Scout policy evaluation
- name: Docker Scout - Policy Evaluation - name: Docker Scout - Policy Evaluation
uses: docker/scout-action@v1 uses: docker/scout-action@v1
if: always() if: always() && github.event_name != 'pull_request'
with: with:
command: policy command: policy
image: ${{ env.REGISTRY }}/${{ env.IMAGE }}:${{ env.SHA }} image: ${{ env.REGISTRY }}/${{ env.IMAGE }}:latest
exit-code: false exit-code: false
write-comment: true write-comment: true
github-token: ${{ secrets.GITHUB_TOKEN }} github-token: ${{ secrets.GITHUB_TOKEN }}