chore(deps): update docker.io/alpine docker tag to v3.24.2 #151
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Docker CI | |
| on: | |
| push: | |
| branches: [master] | |
| tags: ["*"] | |
| pull_request: | |
| schedule: | |
| - cron: 0 0 * * 0 | |
| jobs: | |
| lint: | |
| uses: owncloud-docker/ubuntu/.github/workflows/lint-editorconfig.yml@master | |
| prepare: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| date: ${{ steps.resolve.outputs.date }} | |
| steps: | |
| - name: Resolve date stamp | |
| id: resolve | |
| run: echo "date=$(date -u +%Y%m%d)" >> "$GITHUB_OUTPUT" | |
| build: | |
| needs: [lint, prepare] | |
| uses: owncloud-docker/ubuntu/.github/workflows/docker-build-native.yml@master | |
| with: | |
| docker-repo-name: owncloud/${{ github.event.repository.name }} | |
| docker-tag: ${{ matrix.release.version }} | |
| docker-context: ${{ matrix.release.dir }} | |
| docker-file: ${{ matrix.release.dir }}/Dockerfile.multiarch | |
| docker-hub-username: ${{ vars.DOCKERHUB_USERNAME }} | |
| docker-build-args: | | |
| VERSION=${{ matrix.release.version }} | |
| REVISION=${{ github.sha }} | |
| docker-cache-from: type=gha | |
| docker-cache-to: type=gha,mode=max | |
| trivy-ignore-files: .trivyignore,${{ matrix.release.trivy-ignore }} | |
| docker-extra-tags: | | |
| ${{ matrix.release.extra-tags }} | |
| ${{ matrix.release.version }}-${{ needs.prepare.outputs.date }} | |
| smoke-test-port: "9200" | |
| smoke-test-url: "https://localhost:9200/status.php" | |
| smoke-test-entrypoint-cmd: "ocis init || true; exec ocis server" | |
| smoke-test-env: "OCIS_INSECURE=true" | |
| smoke-test-version-jq: ".productversion" | |
| push: ${{ github.event_name != 'pull_request' }} | |
| secrets: | |
| docker-hub-password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| strategy: | |
| # Each release line is scanned against its own binary, so one line's Trivy | |
| # findings say nothing about the others. With the default fail-fast the first | |
| # red leg cancels the rest mid-build, hiding whether they would have passed. | |
| fail-fast: false | |
| matrix: | |
| release: | |
| # `latest` must always stay on the newest stable release entry | |
| - version: "8.2.0" | |
| dir: "v8" | |
| trivy-ignore: "v8/8.2/.trivyignore" | |
| extra-tags: | | |
| 8.2 | |
| 8 | |
| latest | |
| - version: "8.1.0" | |
| dir: "v8" | |
| trivy-ignore: "v8/8.1/.trivyignore" | |
| extra-tags: | | |
| 8.1 | |
| - version: "8.0.8" | |
| dir: "v8" | |
| trivy-ignore: "v8/8.0/.trivyignore" | |
| extra-tags: | | |
| 8.0 | |
| update-docker-hub-description: | |
| needs: build | |
| if: github.ref == 'refs/heads/master' | |
| uses: owncloud-docker/ubuntu/.github/workflows/docker-hub-desc.yml@master | |
| with: | |
| docker-repo-name: owncloud/${{ github.event.repository.name }} | |
| docker-repo-description: ownCloud Infinite Scale | |
| docker-hub-username: ${{ vars.DOCKERHUB_USERNAME }} | |
| secrets: | |
| docker-hub-password: ${{ secrets.DOCKERHUB_TOKEN }} |