Skip to content

fix: bump ubi8/ubi-minimal from 8.10-1086 to 8.10-1130 (#119) #272

fix: bump ubi8/ubi-minimal from 8.10-1086 to 8.10-1130 (#119)

fix: bump ubi8/ubi-minimal from 8.10-1086 to 8.10-1130 (#119) #272

Workflow file for this run

name: Publish Container Images
on:
push:
tags:
- 'v*.*.*'
branches:
- main
pull_request:
jobs:
docker:
runs-on: ubuntu-latest
steps:
-
name: Checkout
uses: actions/checkout@v4
- name: Prepare additional Metadata
id: addtional_meta
run: |
echo created=$(date -u +'%Y-%m-%dT%H:%M:%SZ') >> $GITHUB_OUTPUT
- name: Prepare Image Metadata
id: meta
uses: docker/metadata-action@v5
with:
images: |
ghcr.io/radiorabe/ubi8-minimal
tags: |
type=schedule
type=ref,event=branch
type=ref,event=pr
type=semver,pattern={{version}}
type=semver,pattern={{major}}.{{minor}}
type=semver,pattern={{major}}
type=sha
labels: |
name=ubi8-minimal
summary=${{ github.event.repository.description }}
url=${{ github.event.repository.html_url }}
vcs-ref=${{ github.sha }}
revision=${{ github.sha }}
release=${{ github.sha }}
build-date=${{ steps.addtional_meta.outputs.created }}
io.k8s.display-name=RaBe Universal Base Image 8 Minimal
io.k8s.description=${{ github.event.repository.description }}
io.openshift.tags=minimal rhel8 rabe
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Build Container Image
id: docker_build
uses: docker/build-push-action@v6
with:
context: .
file: ./Dockerfile
platforms: linux/amd64
load: true
push: false
tags: ${{ steps.meta.outputs.tags }}
cache-to: type=gha,mode=max
labels: |
${{ steps.meta.outputs.labels }}
version=${{ steps.meta.outputs.version }}
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@master
with:
image-ref: 'ghcr.io/radiorabe/ubi8-minimal:${{ steps.meta.outputs.version }}'
format: 'sarif'
ignore-unfixed: true
output: 'trivy-results.sarif'
- name: Upload Trivy scan results to GitHub Security tab
uses: github/codeql-action/upload-sarif@v3
if: always()
with:
sarif_file: 'trivy-results.sarif'
- name: Login to GitHub Container Registry
uses: docker/login-action@v3
if: github.event_name != 'pull_request'
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Push Container Image
id: docker_push
uses: docker/build-push-action@v6
with:
context: .
file: ./Dockerfile
platforms: linux/amd64
push: ${{ github.event_name != 'pull_request' && startsWith(github.event.ref, 'refs/tags/v') }}
tags: ${{ steps.meta.outputs.tags }}
cache-from: type=gha
labels: |
${{ steps.meta.outputs.labels }}
version=${{ steps.meta.outputs.version }}