Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore: add annotations to manifest #201

Merged
merged 12 commits into from
Nov 10, 2023
Merged

chore: add annotations to manifest #201

Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
8976ff4
chore: add test annotation to manifest
rjaegers Nov 10, 2023
b32443e
chore: correct annotation syntax
rjaegers Nov 10, 2023
12749e9
chore: derive manifest labels from metadata action
rjaegers Nov 10, 2023
844a094
chore: correct syntax for GITHUB_OUTPUT
rjaegers Nov 10, 2023
e3b19c4
chore: fixing shell issue
rjaegers Nov 10, 2023
9e39401
chore: more shell fixing
rjaegers Nov 10, 2023
60440fe
chore: more shell fun
rjaegers Nov 10, 2023
469e7a8
chore: more shell fun
rjaegers Nov 10, 2023
9f28160
chore: more shell fun
rjaegers Nov 10, 2023
8ac5070
chore: satisfy linter
rjaegers Nov 10, 2023
e3880f5
chore: try to use derived image name
rjaegers Nov 10, 2023
678fcc1
chore: don't scan images that are not pushed to the registry
rjaegers Nov 10, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 7 additions & 1 deletion .github/workflows/build-push.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,6 +42,11 @@ jobs:
type=semver,pattern={{version}}
type=semver,pattern={{major}}.{{minor}}
type=semver,pattern={{major}}
- run: |
set -Eeuo pipefail
ANNOTATIONS=$(echo '${{ steps.meta.outputs.labels }}' | sed 's/org.opencontainers.image./annotation-index.org.opencontainers.image./' | tr '\n' ',')
echo "annotations=${ANNOTATIONS::-1}" >> "$GITHUB_OUTPUT"
id: annotations
- uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
- uses: docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
- uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
Expand All @@ -58,12 +63,13 @@ jobs:
push: ${{ github.event_name != 'merge_group' }}
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
outputs: type=image,${{ steps.annotations.outputs.annotations }}
sbom: true
provenance: true
cache-from: type=gha
cache-to: type=gha,mode=max
- uses: anchore/sbom-action@78fc58e266e87a38d4194b2137a3d4e9bcaf7ca1 # v0.14.3
if: ${{ steps.build-and-push.outputs.digest != '' }}
if: ${{ steps.build-and-push.outputs.digest != '' && github.event_name != 'merge_group' }}
with:
image: ${{ env.REGISTRY }}/${{ github.repository }}@${{ steps.build-and-push.outputs.digest }}
dependency-snapshot: true
Expand Down