bump action versions

This commit is contained in:
Cyb3r-Jak3 2024-09-09 17:45:32 -04:00
parent 0017df71a2
commit e471edd93a
No known key found for this signature in database
4 changed files with 24 additions and 23 deletions

View File

@ -28,7 +28,7 @@ jobs:
- 5000:5000 - 5000:5000
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@master uses: actions/checkout@v4
- name: Set version - name: Set version
id: version id: version
run: echo "::set-output name=version::`cat build/VERSION`" run: echo "::set-output name=version::`cat build/VERSION`"
@ -37,17 +37,17 @@ jobs:
run: if [[ $GITHUB_REF == "refs/heads/master" ]]; then echo "::set-output name=repo::${DOCKER_REPO}"; else echo "::set-output name=repo::${DOCKER_REPO_DEV}"; fi run: if [[ $GITHUB_REF == "refs/heads/master" ]]; then echo "::set-output name=repo::${DOCKER_REPO}"; else echo "::set-output name=repo::${DOCKER_REPO_DEV}"; fi
- name: Docker meta - name: Docker meta
id: docker_meta id: docker_meta
uses: crazy-max/ghaction-docker-meta@v1 uses: docker/metadata-action@v5
with: with:
images: ${{ steps.repo.outputs.repo }} images: ${{ steps.repo.outputs.repo }}
- name: Set up QEMU - name: Set up QEMU
uses: docker/setup-qemu-action@v1 uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v1 uses: docker/setup-buildx-action@v3
with: with:
driver-opts: network=host driver-opts: network=host
- name: Build image without push to registry - name: Build image without push to registry
uses: docker/build-push-action@v2 uses: docker/build-push-action@v6
with: with:
context: ./build context: ./build
file: ./build/Dockerfile file: ./build/Dockerfile
@ -56,31 +56,32 @@ jobs:
tags: localhost:5000/protonmail-bridge:latest tags: localhost:5000/protonmail-bridge:latest
- name: Scan image - name: Scan image
id: scan id: scan
uses: anchore/scan-action@v2 uses: anchore/scan-action@v4
with: with:
image: localhost:5000/protonmail-bridge:latest image: localhost:5000/protonmail-bridge:latest
fail-build: true fail-build: true
severity-cutoff: critical severity-cutoff: critical
acs-report-enable: true output-format: sarif
- name: Upload Anchore scan SARIF report - name: Upload Anchore scan SARIF report
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v3
with: with:
sarif_file: ${{ steps.scan.outputs.sarif }} sarif_file: ${{ steps.scan.outputs.sarif }}
- name: Login to DockerHub - name: Login to DockerHub
uses: docker/login-action@v1 uses: docker/login-action@v3
if: ${{ github.event_name != 'pull_request' && github.ref == 'refs/heads/master' }} if: ${{ github.event_name != 'pull_request' && github.ref == 'refs/heads/master' }}
with: with:
username: ${{ secrets.REGISTRY_USERNAME }} username: ${{ secrets.REGISTRY_USERNAME }}
password: ${{ secrets.REGISTRY_PASSWORD }} password: ${{ secrets.REGISTRY_PASSWORD }}
- name: Login to GitHub Container Registry - name: Login to GitHub Container Registry
uses: docker/login-action@v1 uses: docker/login-action@v3
if: ${{ github.event_name != 'pull_request' && github.ref == 'refs/heads/dev' }} if: ${{ github.event_name != 'pull_request' && github.ref == 'refs/heads/dev' }}
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.repository_owner }} username: ${{ github.repository_owner }}
password: ${{ secrets.CR_PAT }} password: ${{ secrets.CR_PAT }}
- name: Push image - name: Push image
uses: docker/build-push-action@v2 uses: docker/build-push-action@v6
with: with:
context: ./build context: ./build
file: ./build/Dockerfile file: ./build/Dockerfile

View File

@ -22,7 +22,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@master uses: actions/checkout@v4
- name: Set version - name: Set version
id: version id: version
run: echo "::set-output name=version::`cat deb/VERSION`" run: echo "::set-output name=version::`cat deb/VERSION`"
@ -31,13 +31,13 @@ jobs:
run: if [[ $GITHUB_REF == "refs/heads/master" ]]; then echo "::set-output name=repo::${DOCKER_REPO}"; else echo "::set-output name=repo::${DOCKER_REPO_DEV}"; fi run: if [[ $GITHUB_REF == "refs/heads/master" ]]; then echo "::set-output name=repo::${DOCKER_REPO}"; else echo "::set-output name=repo::${DOCKER_REPO_DEV}"; fi
- name: Docker meta - name: Docker meta
id: docker_meta id: docker_meta
uses: crazy-max/ghaction-docker-meta@v1 uses: docker/metadata-action@v5
with: with:
images: ${{ steps.repo.outputs.repo }} images: ${{ steps.repo.outputs.repo }}
- name: Set up Docker Buildx - name: Set up Docker Buildx
uses: docker/setup-buildx-action@v1 uses: docker/setup-buildx-action@v3
- name: Build image without push - name: Build image without push
uses: docker/build-push-action@v2 uses: docker/build-push-action@v6
with: with:
context: ./deb context: ./deb
file: ./deb/Dockerfile file: ./deb/Dockerfile
@ -45,31 +45,31 @@ jobs:
tags: protonmail-bridge:latest tags: protonmail-bridge:latest
- name: Scan image - name: Scan image
id: scan id: scan
uses: anchore/scan-action@v2 uses: anchore/scan-action@v4
with: with:
image: protonmail-bridge:latest image: protonmail-bridge:latest
fail-build: true fail-build: true
severity-cutoff: critical severity-cutoff: critical
acs-report-enable: true output-format: sarif
- name: Upload Anchore scan SARIF report - name: Upload Anchore scan SARIF report
uses: github/codeql-action/upload-sarif@v1 uses: github/codeql-action/upload-sarif@v3
with: with:
sarif_file: ${{ steps.scan.outputs.sarif }} sarif_file: ${{ steps.scan.outputs.sarif }}
- name: Login to DockerHub - name: Login to DockerHub
uses: docker/login-action@v1 uses: docker/login-action@v3
if: ${{ github.event_name != 'pull_request' && github.ref == 'refs/heads/master' }} if: ${{ github.event_name != 'pull_request' && github.ref == 'refs/heads/master' }}
with: with:
username: ${{ secrets.REGISTRY_USERNAME }} username: ${{ secrets.REGISTRY_USERNAME }}
password: ${{ secrets.REGISTRY_PASSWORD }} password: ${{ secrets.REGISTRY_PASSWORD }}
- name: Login to GitHub Container Registry - name: Login to GitHub Container Registry
uses: docker/login-action@v1 uses: docker/login-action@v3
if: ${{ github.event_name != 'pull_request' && github.ref == 'refs/heads/dev' }} if: ${{ github.event_name != 'pull_request' && github.ref == 'refs/heads/dev' }}
with: with:
registry: ghcr.io registry: ghcr.io
username: ${{ github.repository_owner }} username: ${{ github.repository_owner }}
password: ${{ secrets.CR_PAT }} password: ${{ secrets.CR_PAT }}
- name: Push image - name: Push image
uses: docker/build-push-action@v2 uses: docker/build-push-action@v6
with: with:
context: ./deb context: ./deb
file: ./deb/Dockerfile file: ./deb/Dockerfile

View File

@ -12,7 +12,7 @@ jobs:
name: Mirror to Gitee name: Mirror to Gitee
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- uses: actions/checkout@v2 - uses: actions/checkout@v4
with: with:
fetch-depth: 0 fetch-depth: 0
- name: Push to Gitee - name: Push to Gitee

View File

@ -20,7 +20,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@master uses: actions/checkout@v4
with: with:
token: ${{ secrets.PERSONAL_TOKEN }} token: ${{ secrets.PERSONAL_TOKEN }}
- name: Check Update - name: Check Update