fix: merge edits

chore: bump version
This commit is contained in:
jon brookes 2026-02-15 10:37:43 +00:00
parent 5646ddd9a3
commit 969ea504f3
4 changed files with 19 additions and 30 deletions

View file

@ -14,10 +14,10 @@ steps:
- docker pull quay.io/marshyon/share-lt:latest || true
- echo "Building image for testing (amd64 only for CI compatibility)..."
- docker build --platform linux/amd64 --cache-from=quay.io/marshyon/share-lt:latest -t share-lt:test .
- echo "Tagging test image as quay.io/marshyon/share-lt:v0.0.6..."
- docker tag share-lt:test quay.io/marshyon/share-lt:v0.0.6
- echo "Tagging test image as quay.io/marshyon/share-lt:v0.0.7..."
- docker tag share-lt:test quay.io/marshyon/share-lt:v0.0.7
- echo "Generating SBOM..."
- docker run --rm -v /var/run/docker.sock:/var/run/docker.sock anchore/syft:latest scan quay.io/marshyon/share-lt:v0.0.6 -o cyclonedx-json > sbom.json
- docker run --rm -v /var/run/docker.sock:/var/run/docker.sock anchore/syft:latest scan quay.io/marshyon/share-lt:v0.0.7 -o cyclonedx-json > sbom.json
scan-vulnerabilities:
image: aquasec/trivy:0.67.2
volumes:
@ -43,7 +43,7 @@ steps:
repo: quay.io/marshyon/share-lt
platforms: linux/amd64
tags:
- v0.0.6
- v0.0.7
- latest
username:
from_secret: QUAY_USERNAME
@ -59,6 +59,6 @@ steps:
COSIGN_REGISTRY_PASSWORD:
from_secret: QUAY_PASSWORD
commands:
- cosign attach sbom --sbom sbom.json quay.io/marshyon/share-lt:v0.0.6 || echo "SBOM attach failed"
- cosign attach sbom --sbom sbom.json quay.io/marshyon/share-lt:v0.0.7 || echo "SBOM attach failed"
- echo "Done - trivy report saved to workspace for manual review"