This commit is contained in:
Alexey Pustovalov 2024-02-29 21:13:01 +09:00
parent 5915ead4bf
commit 855f6fd0c2

View File

@ -120,7 +120,7 @@ jobs:
env: env:
MATRIX_FILE: ${{ env.MATRIX_FILE }} MATRIX_FILE: ${{ env.MATRIX_FILE }}
run: | run: |
component_list=$(jq -r '.components | keys | @json' "$MATRIX_FILE") component_list=$(jq -r '.components | map_values(select(.rhel == true)) | keys | @json' "$MATRIX_FILE")
echo "::group::Zabbix Component List" echo "::group::Zabbix Component List"
echo "$component_list" echo "$component_list"
@ -365,7 +365,8 @@ jobs:
username: ${{ github.actor }} username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }} password: ${{ secrets.GITHUB_TOKEN }}
- env: - name: Copy RedHat subscription
env:
CONTEXT: ${{ format('{0}/{1}/{2}', env.DOCKERFILES_DIRECTORY, env.BASE_BUILD_NAME, matrix.os) }} CONTEXT: ${{ format('{0}/{1}/{2}', env.DOCKERFILES_DIRECTORY, env.BASE_BUILD_NAME, matrix.os) }}
run: | run: |
cp -R /tmp/secrets/ $CONTEXT/ cp -R /tmp/secrets/ $CONTEXT/
@ -379,7 +380,7 @@ jobs:
platforms: ${{ steps.platform.outputs.list }} platforms: ${{ steps.platform.outputs.list }}
push: true push: true
provenance: mode=max provenance: mode=max
sbom: true sbom: ${{ env.AUTO_PUSH_IMAGES == 'true' }}
tags: ${{ steps.meta.outputs.tags }} tags: ${{ steps.meta.outputs.tags }}
labels: | labels: |
org.opencontainers.image.revision=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.revision'] }} org.opencontainers.image.revision=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.revision'] }}
@ -691,7 +692,7 @@ jobs:
build: ${{ fromJson(needs.init_build.outputs.components) }} build: ${{ fromJson(needs.init_build.outputs.components) }}
os: ${{ fromJson(needs.init_build.outputs.os) }} os: ${{ fromJson(needs.init_build.outputs.os) }}
runs-on: ubuntu-latest runs-on: [self-hosted, linux, ubuntu]
permissions: permissions:
contents: read contents: read
id-token: write id-token: write
@ -701,7 +702,7 @@ jobs:
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0 uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
with: with:
disable-sudo: true disable-sudo: true
egress-policy: block egress-policy: audit
allowed-endpoints: > allowed-endpoints: >
api.github.com:443 api.github.com:443
auth.docker.io:443 auth.docker.io:443