chore(): No report scan
- Tags the image with the specific version - Removes the report pushing from the trivy scan
This commit is contained in:
parent
438851fc13
commit
5a85b0f765
2 changed files with 3 additions and 20 deletions
21
.drone.yml
21
.drone.yml
|
@ -27,22 +27,6 @@ steps:
|
||||||
depends_on:
|
depends_on:
|
||||||
- generate-blog
|
- generate-blog
|
||||||
|
|
||||||
- name: test-build-container
|
|
||||||
image: plugins/docker
|
|
||||||
settings:
|
|
||||||
registry: scm.project42.io
|
|
||||||
username:
|
|
||||||
from_secret: registry_username
|
|
||||||
password:
|
|
||||||
from_secret: registry_password
|
|
||||||
repo: scm.project42.io/elia/blog
|
|
||||||
dry_run: true
|
|
||||||
squash: true
|
|
||||||
tags:
|
|
||||||
- "${DRONE_COMMIT_SHA:0:8}"
|
|
||||||
depends_on:
|
|
||||||
- clean-up-images
|
|
||||||
|
|
||||||
- name: build-container
|
- name: build-container
|
||||||
image: plugins/docker
|
image: plugins/docker
|
||||||
settings:
|
settings:
|
||||||
|
@ -57,7 +41,7 @@ steps:
|
||||||
tags:
|
tags:
|
||||||
- "${DRONE_COMMIT_SHA:0:8}"
|
- "${DRONE_COMMIT_SHA:0:8}"
|
||||||
depends_on:
|
depends_on:
|
||||||
- test-build-container
|
- clean-up-images
|
||||||
when:
|
when:
|
||||||
event:
|
event:
|
||||||
exclude:
|
exclude:
|
||||||
|
@ -71,7 +55,7 @@ steps:
|
||||||
REGISTRY_PASSWORD:
|
REGISTRY_PASSWORD:
|
||||||
from_secret: registry_password
|
from_secret: registry_password
|
||||||
commands:
|
commands:
|
||||||
- generate-scan-report -i scm.project42.io/elia/blog -t "${DRONE_COMMIT_SHA:0:8}" -g "${DRONE_COMMIT_SHA:0:8}"
|
- trivy image --image-src remote --exit-code 0 --username "$REGISTRY_USERNAME" --password "$REGISTRY_PASSWORD" "scm.project42.io/elia/blog:${DRONE_COMMIT_SHA:0:8}"
|
||||||
depends_on:
|
depends_on:
|
||||||
- build-container
|
- build-container
|
||||||
when:
|
when:
|
||||||
|
@ -87,7 +71,6 @@ steps:
|
||||||
REGISTRY_PASSWORD:
|
REGISTRY_PASSWORD:
|
||||||
from_secret: registry_password
|
from_secret: registry_password
|
||||||
commands:
|
commands:
|
||||||
- check-scan-report -i scm.project42.io/elia/blog -t "${DRONE_COMMIT_SHA:0:8}"
|
|
||||||
- oras tag --username "$REGISTRY_USERNAME" --password "$REGISTRY_PASSWORD" "scm.project42.io/elia/blog:${DRONE_COMMIT_SHA:0:8}" latest
|
- oras tag --username "$REGISTRY_USERNAME" --password "$REGISTRY_PASSWORD" "scm.project42.io/elia/blog:${DRONE_COMMIT_SHA:0:8}" latest
|
||||||
depends_on:
|
depends_on:
|
||||||
- trivy-scan
|
- trivy-scan
|
||||||
|
|
|
@ -1,4 +1,4 @@
|
||||||
FROM nginxinc/nginx-unprivileged:alpine
|
FROM nginxinc/nginx-unprivileged:1.25.3-alpine3.18
|
||||||
MAINTAINER Elia el Lazkani <elia@lazkani.io>
|
MAINTAINER Elia el Lazkani <elia@lazkani.io>
|
||||||
|
|
||||||
COPY public/ /usr/share/nginx/html/blog/
|
COPY public/ /usr/share/nginx/html/blog/
|
||||||
|
|
Loading…
Reference in a new issue