This commit is contained in:
Simon Ungar Felding 2025-04-24 22:50:14 +02:00
parent 318f6f6682
commit 815e481d36

View File

@ -15,7 +15,7 @@ on:
env: env:
GHCR_REPO: shenxn/protonmail-bridge-docker GHCR_REPO: shenxn/protonmail-bridge-docker
DOCKERHUB_REPO: shenxn/protonmail-bridge DOCKERHUB_REPO: shenxn/protonmail-bridge
DOCKER_REPO_DEV: ghcr.io/shenxn/protonmail-bridge-dev DOCKER_REPO_DEV: ghcr.io/shenxn/protonmail-bridge
PLATFORMS: linux/amd64,linux/arm64/v8,linux/arm/v7,linux/riscv64 PLATFORMS: linux/amd64,linux/arm64/v8,linux/arm/v7,linux/riscv64
jobs: jobs:
@ -42,7 +42,7 @@ jobs:
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.repository_owner }} username: ${{ github.repository_owner }}
password: ${{ secrets.CR_PAT }} password: ${{ secrets.GITHUB_TOKEN }}
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3 uses: docker/setup-buildx-action@v3
@ -57,14 +57,14 @@ jobs:
outputs: type=image,"name=${{ env.DOCKER_REPO_DEV }}",push-by-digest=false,name-canonical=true,push=true outputs: type=image,"name=${{ env.DOCKER_REPO_DEV }}",push-by-digest=false,name-canonical=true,push=true
context: ./build context: ./build
file: ./build/Dockerfile file: ./build/Dockerfile
tags: "${{ env.DOCKER_REPO_DEV }}:${{ github.ref_name }}" tags: "${{ env.DOCKER_REPO_DEV }}:dev-${{ github.ref_name }}"
build-args: | build-args: |
version=${{ env.version }} version=${{ env.version }}
- name: Run Trivy vulnerability scan - name: Run Trivy vulnerability scan
uses: aquasecurity/trivy-action@0.30.0 uses: aquasecurity/trivy-action@0.30.0
with: with:
image-ref: "${{ env.DOCKER_REPO_DEV }}:${{ github.ref_name }}" image-ref: "${{ env.DOCKER_REPO_DEV }}:dev-${{ github.ref_name }}"
format: 'sarif' format: 'sarif'
exit-code: 0 exit-code: 0
severity: 'CRITICAL,HIGH' severity: 'CRITICAL,HIGH'