feat/queue-messages (#19)
Co-authored-by: jon brookes <marshyon@gmail.com> Reviewed-on: https://codeberg.org/headshed/share-lt/pulls/19
This commit is contained in:
parent
1a22fd156d
commit
74bc17d019
9 changed files with 88 additions and 8 deletions
|
|
@ -14,10 +14,10 @@ steps:
|
|||
- docker pull quay.io/marshyon/share-lt:latest || true
|
||||
- echo "Building image for testing (amd64 only for CI compatibility)..."
|
||||
- docker build --platform linux/amd64 --cache-from=quay.io/marshyon/share-lt:latest -t share-lt:test .
|
||||
- echo "Tagging test image as quay.io/marshyon/share-lt:v0.0.5..."
|
||||
- docker tag share-lt:test quay.io/marshyon/share-lt:v0.0.5
|
||||
- echo "Tagging test image as quay.io/marshyon/share-lt:v0.0.6..."
|
||||
- docker tag share-lt:test quay.io/marshyon/share-lt:v0.0.6
|
||||
- echo "Generating SBOM..."
|
||||
- docker run --rm -v /var/run/docker.sock:/var/run/docker.sock anchore/syft:latest scan quay.io/marshyon/share-lt:v0.0.5 -o cyclonedx-json > sbom.json
|
||||
- docker run --rm -v /var/run/docker.sock:/var/run/docker.sock anchore/syft:latest scan quay.io/marshyon/share-lt:v0.0.6 -o cyclonedx-json > sbom.json
|
||||
scan-vulnerabilities:
|
||||
image: aquasec/trivy:0.67.2
|
||||
volumes:
|
||||
|
|
@ -41,7 +41,7 @@ steps:
|
|||
repo: quay.io/marshyon/share-lt
|
||||
platforms: linux/amd64
|
||||
tags:
|
||||
- v0.0.5
|
||||
- v0.0.6
|
||||
- latest
|
||||
username:
|
||||
from_secret: QUAY_USERNAME
|
||||
|
|
@ -57,6 +57,6 @@ steps:
|
|||
COSIGN_REGISTRY_PASSWORD:
|
||||
from_secret: QUAY_PASSWORD
|
||||
commands:
|
||||
- cosign attach sbom --sbom sbom.json quay.io/marshyon/share-lt:v0.0.5 || echo "SBOM attach failed"
|
||||
- cosign attach sbom --sbom sbom.json quay.io/marshyon/share-lt:v0.0.6 || echo "SBOM attach failed"
|
||||
- echo "Done - trivy report saved to workspace for manual review"
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue