Test job: build only, no push to GHCR
This commit is contained in:
parent
ed4d5d491a
commit
c7d1ba9d28
1 changed files with 4 additions and 4 deletions
8
.github/workflows/build.yaml
vendored
8
.github/workflows/build.yaml
vendored
|
|
@ -57,21 +57,21 @@ jobs:
|
||||||
with:
|
with:
|
||||||
driver-opts: network=host
|
driver-opts: network=host
|
||||||
|
|
||||||
- name: Build and push
|
- name: Build
|
||||||
uses: docker/build-push-action@v6
|
uses: docker/build-push-action@v6
|
||||||
with:
|
with:
|
||||||
labels: ${{ steps.meta.outputs.labels }}
|
labels: ${{ steps.meta.outputs.labels }}
|
||||||
context: ./build
|
context: ./build
|
||||||
file: ./build/Dockerfile
|
file: ./build/Dockerfile
|
||||||
tags: "${{ env.GHCR_REPO }}:dev-pr${{ github.event.pull_request.number }}"
|
load: true
|
||||||
push: true
|
tags: "protonmail-bridge:test"
|
||||||
build-args: |
|
build-args: |
|
||||||
version=${{ needs.resolve-version.outputs.version }}
|
version=${{ needs.resolve-version.outputs.version }}
|
||||||
|
|
||||||
- name: Run Trivy vulnerability scan
|
- name: Run Trivy vulnerability scan
|
||||||
uses: aquasecurity/trivy-action@0.30.0
|
uses: aquasecurity/trivy-action@0.30.0
|
||||||
with:
|
with:
|
||||||
image-ref: "${{ env.GHCR_REPO }}:dev-pr${{ github.event.pull_request.number }}"
|
image-ref: "protonmail-bridge:test"
|
||||||
format: 'sarif'
|
format: 'sarif'
|
||||||
exit-code: 0
|
exit-code: 0
|
||||||
severity: 'CRITICAL,HIGH'
|
severity: 'CRITICAL,HIGH'
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue