1- name : Release container images
1+ # name: Release container images
22
3- on :
4- pull_request :
5- types : [closed]
6- branches :
7- - master
3+ # on:
4+ # pull_request:
5+ # types: [closed]
6+ # branches:
7+ # - master
88
9- env :
10- APPLICATION_NAME : redis-operator
11- QuayImageName : quay.io/opstree/redis-operator
12- APP_VERSION : " v0.15.2"
13- DOCKERFILE_PATH : ' ./Dockerfile'
9+ # env:
10+ # APPLICATION_NAME: redis-operator
11+ # QuayImageName: quay.io/opstree/redis-operator
12+ # APP_VERSION: "v0.15.2"
13+ # DOCKERFILE_PATH: './Dockerfile'
1414
15- jobs :
16- release_image :
17- if : github.event.pull_request.merged == true
18- runs-on : ubuntu-latest
19- environment : release-image
20- steps :
21- - name : Checkout
22- uses : actions/checkout@v2
15+ # jobs:
16+ # release_image:
17+ # if: github.event.pull_request.merged == true
18+ # runs-on: ubuntu-latest
19+ # environment: release-image
20+ # steps:
21+ # - name: Checkout
22+ # uses: actions/checkout@v2
2323
24- - name : Set up Docker Buildx
25- uses : docker/setup-buildx-action@v2
24+ # - name: Set up Docker Buildx
25+ # uses: docker/setup-buildx-action@v2
2626
27- - name : Set up QEMU
28- uses : docker/setup-qemu-action@v3
27+ # - name: Set up QEMU
28+ # uses: docker/setup-qemu-action@v3
2929
30- - name : Login to Quay.io
31- uses : docker/login-action@v3
32- with :
33- registry : quay.io
34- username : ${{ secrets.QUAY_USERNAME }}
35- password : ${{ secrets.QUAY_PASSWORD }}
30+ # - name: Login to Quay.io
31+ # uses: docker/login-action@v3
32+ # with:
33+ # registry: quay.io
34+ # username: ${{ secrets.QUAY_USERNAME }}
35+ # password: ${{ secrets.QUAY_PASSWORD }}
3636
37- - name : Build and push multi-arch latest image
38- uses : docker/build-push-action@v2
39- with :
40- context : .
41- file : ${{ env.DOCKERFILE_PATH }}
42- platforms : linux/amd64,linux/arm64
43- push : true
44- tags : ${{ env.QuayImageName }}:${{ env.APP_VERSION }}, ${{ env.QuayImageName }}:latest
37+ # - name: Build and push multi-arch latest image
38+ # uses: docker/build-push-action@v2
39+ # with:
40+ # context: .
41+ # file: ${{ env.DOCKERFILE_PATH }}
42+ # platforms: linux/amd64,linux/arm64
43+ # push: true
44+ # tags: ${{ env.QuayImageName }}:${{ env.APP_VERSION }}, ${{ env.QuayImageName }}:latest
4545
46- trivy_scan :
47- needs : [release_image]
48- runs-on : ubuntu-latest
49- steps :
50- - name : Checkout
51- uses : actions/checkout@v2
52- - name : Run Trivy vulnerability scanner for arm64 image
53- uses : aquasecurity/trivy-action@master
46+ # trivy_scan:
47+ # needs: [release_image]
48+ # runs-on: ubuntu-latest
49+ # steps:
50+ # - name: Checkout
51+ # uses: actions/checkout@v2
52+ # - name: Run Trivy vulnerability scanner for arm64 image
53+ # uses: aquasecurity/trivy-action@master
5454
55- - name : Run Trivy vulnerability scanner for multi-arch image
56- uses : aquasecurity/trivy-action@master
57- with :
58- image-ref : ${{ env.QuayImageName }}:${{ env.APP_VERSION }}
59- format : ' template'
60- template : ' @/contrib/sarif.tpl'
61- output : ' trivy-results-latest.sarif'
62- exit-code : ' 1'
63- ignore-unfixed : true
64- severity : ' CRITICAL,HIGH'
65- - name : Run Trivy vulnerability scanner for latest image
66- uses : aquasecurity/trivy-action@master
67- with :
68- image-ref : ${{ env.QuayImageName }}:latest
69- format : ' template'
70- template : ' @/contrib/sarif.tpl'
71- output : ' trivy-results-latest.sarif'
72- exit-code : ' 1'
73- ignore-unfixed : true
74- severity : ' CRITICAL,HIGH'
55+ # - name: Run Trivy vulnerability scanner for multi-arch image
56+ # uses: aquasecurity/trivy-action@master
57+ # with:
58+ # image-ref: ${{ env.QuayImageName }}:${{ env.APP_VERSION }}
59+ # format: 'template'
60+ # template: '@/contrib/sarif.tpl'
61+ # output: 'trivy-results-latest.sarif'
62+ # exit-code: '1'
63+ # ignore-unfixed: true
64+ # severity: 'CRITICAL,HIGH'
65+ # - name: Run Trivy vulnerability scanner for latest image
66+ # uses: aquasecurity/trivy-action@master
67+ # with:
68+ # image-ref: ${{ env.QuayImageName }}:latest
69+ # format: 'template'
70+ # template: '@/contrib/sarif.tpl'
71+ # output: 'trivy-results-latest.sarif'
72+ # exit-code: '1'
73+ # ignore-unfixed: true
74+ # severity: 'CRITICAL,HIGH'
0 commit comments