Skip to content
New issue

Have a question about this project? # for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “#”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? # to your account

updating dockerfile and build workflow #206

Open
wants to merge 5 commits into
base: main
Choose a base branch
from

Conversation

John-Scira
Copy link
Collaborator

No description provided.

Copy link

github-actions bot commented Feb 4, 2025

Thank you for contributing to the ops-terra-utils repo!
A test suite will now begin running to ensure that no breaking changes are made.
If these tests fail you can have them re-run after making changes by commenting /run_tests

@@ -13,31 +13,41 @@
steps:
- name: Checkout code
uses: actions/checkout@v4
- uses: webfactory/ssh-agent@v0.9.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Build and Push Docker images to Google Artifact Registry (GAR)' step
Uses Step
uses 'webfactory/ssh-agent' with ref 'v0.9.0', not a pinned commit hash
run: |
docker tag us-central1-docker.pkg.dev/$PROJECT_ID/$REPOSITORY/ops_terra_utils_slim:$GITHUB_SHA us-central1-docker.pkg.dev/$PROJECT_ID/$REPOSITORY/ops_terra_utils_slim:latest
docker push us-central1-docker.pkg.dev/$PROJECT_ID/$REPOSITORY/ops_terra_utils_slim:latest
uses: docker/build-push-action@v6

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Build and Push Docker images to Google Artifact Registry (GAR)' step
Uses Step
uses 'docker/build-push-action' with ref 'v6', not a pinned commit hash
run: gcloud auth configure-docker us-central1-docker.pkg.dev

- name: GAR Auth
uses: docker/#-action@v3

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Build and Push Docker images to Google Artifact Registry (GAR)' step
Uses Step
uses 'docker/#-action' with ref 'v3', not a pinned commit hash
# for free to join this conversation on GitHub. Already have an account? # to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant