mirror of
https://github.com/zabbix/zabbix-docker.git
synced 2024-11-22 15:53:35 +01:00
Updated
This commit is contained in:
parent
5915ead4bf
commit
855f6fd0c2
11
.github/workflows/images_build_test.yml
vendored
11
.github/workflows/images_build_test.yml
vendored
@ -120,7 +120,7 @@ jobs:
|
|||||||
env:
|
env:
|
||||||
MATRIX_FILE: ${{ env.MATRIX_FILE }}
|
MATRIX_FILE: ${{ env.MATRIX_FILE }}
|
||||||
run: |
|
run: |
|
||||||
component_list=$(jq -r '.components | keys | @json' "$MATRIX_FILE")
|
component_list=$(jq -r '.components | map_values(select(.rhel == true)) | keys | @json' "$MATRIX_FILE")
|
||||||
|
|
||||||
echo "::group::Zabbix Component List"
|
echo "::group::Zabbix Component List"
|
||||||
echo "$component_list"
|
echo "$component_list"
|
||||||
@ -365,7 +365,8 @@ jobs:
|
|||||||
username: ${{ github.actor }}
|
username: ${{ github.actor }}
|
||||||
password: ${{ secrets.GITHUB_TOKEN }}
|
password: ${{ secrets.GITHUB_TOKEN }}
|
||||||
|
|
||||||
- env:
|
- name: Copy RedHat subscription
|
||||||
|
env:
|
||||||
CONTEXT: ${{ format('{0}/{1}/{2}', env.DOCKERFILES_DIRECTORY, env.BASE_BUILD_NAME, matrix.os) }}
|
CONTEXT: ${{ format('{0}/{1}/{2}', env.DOCKERFILES_DIRECTORY, env.BASE_BUILD_NAME, matrix.os) }}
|
||||||
run: |
|
run: |
|
||||||
cp -R /tmp/secrets/ $CONTEXT/
|
cp -R /tmp/secrets/ $CONTEXT/
|
||||||
@ -379,7 +380,7 @@ jobs:
|
|||||||
platforms: ${{ steps.platform.outputs.list }}
|
platforms: ${{ steps.platform.outputs.list }}
|
||||||
push: true
|
push: true
|
||||||
provenance: mode=max
|
provenance: mode=max
|
||||||
sbom: true
|
sbom: ${{ env.AUTO_PUSH_IMAGES == 'true' }}
|
||||||
tags: ${{ steps.meta.outputs.tags }}
|
tags: ${{ steps.meta.outputs.tags }}
|
||||||
labels: |
|
labels: |
|
||||||
org.opencontainers.image.revision=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.revision'] }}
|
org.opencontainers.image.revision=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.revision'] }}
|
||||||
@ -691,7 +692,7 @@ jobs:
|
|||||||
build: ${{ fromJson(needs.init_build.outputs.components) }}
|
build: ${{ fromJson(needs.init_build.outputs.components) }}
|
||||||
os: ${{ fromJson(needs.init_build.outputs.os) }}
|
os: ${{ fromJson(needs.init_build.outputs.os) }}
|
||||||
|
|
||||||
runs-on: ubuntu-latest
|
runs-on: [self-hosted, linux, ubuntu]
|
||||||
permissions:
|
permissions:
|
||||||
contents: read
|
contents: read
|
||||||
id-token: write
|
id-token: write
|
||||||
@ -701,7 +702,7 @@ jobs:
|
|||||||
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
|
uses: step-security/harden-runner@63c24ba6bd7ba022e95695ff85de572c04a18142 # v2.7.0
|
||||||
with:
|
with:
|
||||||
disable-sudo: true
|
disable-sudo: true
|
||||||
egress-policy: block
|
egress-policy: audit
|
||||||
allowed-endpoints: >
|
allowed-endpoints: >
|
||||||
api.github.com:443
|
api.github.com:443
|
||||||
auth.docker.io:443
|
auth.docker.io:443
|
||||||
|
Loading…
Reference in New Issue
Block a user