From 457dfcb962728c1d20504a7e1f9a1e606be55dd5 Mon Sep 17 00:00:00 2001 From: paspo Date: Tue, 23 Jul 2024 18:17:00 +0000 Subject: [PATCH] no vulnscan su build (#152) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit non fa piĆ¹ build + vulnscan + build&publish, ma solo build&publish. visto che mediamente la nostra VPS ci mette 15 min per compilare il sito, meglio ridurre... Reviewed-on: https://git.libreschool.org/BgLUG/bglug.it/pulls/152 Co-authored-by: paspo Co-committed-by: paspo --- .gitea/workflows/build_and_push.yaml | 23 ++--------------------- 1 file changed, 2 insertions(+), 21 deletions(-) diff --git a/.gitea/workflows/build_and_push.yaml b/.gitea/workflows/build_and_push.yaml index 7194b79..270b238 100644 --- a/.gitea/workflows/build_and_push.yaml +++ b/.gitea/workflows/build_and_push.yaml @@ -1,9 +1,10 @@ +--- name: Container Publish on: push: tags: - - '*' + - 'live' schedule: - cron: "0 12 * * *" @@ -31,26 +32,6 @@ jobs: username: ${{ secrets.REGISTRY_USER }} password: ${{ secrets.REGISTRY_TOKEN }} - - name: Build and publish - uses: docker/build-push-action@v5 - with: - context: . - file: ./Dockerfile - platforms: linux/amd64 - load: true - tags: git.libreschool.org/bglug/bglug.it:latest - - - name: Run Trivy vulnerability scanner - id: scan - uses: aquasecurity/trivy-action@master - with: - image-ref: "git.libreschool.org/bglug/bglug.it:latest" - format: "json" - output: "trivy-results.json" - - - name: check output - run: if [ $(jq '.Results[0].Vulnerabilities|length' trivy-results.json) -ne "0" ] ; then exit 1 ; fi - - name: Build and publish uses: docker/build-push-action@v5 with: