Build directly to final registry tag and update all references
ci/woodpecker/push/woodpecker Pipeline failed
Details
ci/woodpecker/push/woodpecker Pipeline failed
Details
This commit is contained in:
parent
90c10e1896
commit
259c2fe731
|
|
@ -98,7 +98,7 @@ steps:
|
|||
- echo "nameserver 1.1.1.1" > /etc/resolv.conf
|
||||
- echo "nameserver 1.0.0.1" >> /etc/resolv.conf
|
||||
- trivy --version | cat
|
||||
- trivy image --timeout 10m --scanners vuln --severity HIGH,CRITICAL --ignore-unfixed --exit-code 1 hastebin:test
|
||||
- trivy image --timeout 10m --scanners vuln --severity HIGH,CRITICAL --ignore-unfixed --exit-code 1 git.nixc.us/nixius/hastebin:latest
|
||||
when:
|
||||
branch: main
|
||||
event: [push, cron]
|
||||
|
|
@ -116,8 +116,8 @@ steps:
|
|||
- apk add --no-cache curl docker-cli
|
||||
- curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
|
||||
- syft version | cat
|
||||
- syft docker:hastebin:test -o table | tee sbom-image.txt
|
||||
- syft docker:hastebin:test -o spdx-json > sbom-image.spdx.json
|
||||
- syft docker:git.nixc.us/nixius/hastebin:latest -o table | tee sbom-image.txt
|
||||
- syft docker:git.nixc.us/nixius/hastebin:latest -o spdx-json > sbom-image.spdx.json
|
||||
- echo "Image SBOM generated successfully"
|
||||
- ls -lh sbom-image.* | cat
|
||||
when:
|
||||
|
|
|
|||
Loading…
Reference in New Issue