Build directly to final registry tag and update all references
ci/woodpecker/push/woodpecker Pipeline failed
Details
ci/woodpecker/push/woodpecker Pipeline failed
Details
This commit is contained in:
parent
90c10e1896
commit
259c2fe731
|
|
@ -98,7 +98,7 @@ steps:
|
||||||
- echo "nameserver 1.1.1.1" > /etc/resolv.conf
|
- echo "nameserver 1.1.1.1" > /etc/resolv.conf
|
||||||
- echo "nameserver 1.0.0.1" >> /etc/resolv.conf
|
- echo "nameserver 1.0.0.1" >> /etc/resolv.conf
|
||||||
- trivy --version | cat
|
- trivy --version | cat
|
||||||
- trivy image --timeout 10m --scanners vuln --severity HIGH,CRITICAL --ignore-unfixed --exit-code 1 hastebin:test
|
- trivy image --timeout 10m --scanners vuln --severity HIGH,CRITICAL --ignore-unfixed --exit-code 1 git.nixc.us/nixius/hastebin:latest
|
||||||
when:
|
when:
|
||||||
branch: main
|
branch: main
|
||||||
event: [push, cron]
|
event: [push, cron]
|
||||||
|
|
@ -116,8 +116,8 @@ steps:
|
||||||
- apk add --no-cache curl docker-cli
|
- apk add --no-cache curl docker-cli
|
||||||
- curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
|
- curl -sSfL https://raw.githubusercontent.com/anchore/syft/main/install.sh | sh -s -- -b /usr/local/bin
|
||||||
- syft version | cat
|
- syft version | cat
|
||||||
- syft docker:hastebin:test -o table | tee sbom-image.txt
|
- syft docker:git.nixc.us/nixius/hastebin:latest -o table | tee sbom-image.txt
|
||||||
- syft docker:hastebin:test -o spdx-json > sbom-image.spdx.json
|
- syft docker:git.nixc.us/nixius/hastebin:latest -o spdx-json > sbom-image.spdx.json
|
||||||
- echo "Image SBOM generated successfully"
|
- echo "Image SBOM generated successfully"
|
||||||
- ls -lh sbom-image.* | cat
|
- ls -lh sbom-image.* | cat
|
||||||
when:
|
when:
|
||||||
|
|
|
||||||
Loading…
Reference in New Issue