fix: Dockerfile to reduce vulnerabilities #106
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Push to other branches | |
| on: | |
| push: | |
| branches-ignore: | |
| - master | |
| - release/* | |
| jobs: | |
| labels: | |
| name: Update repo labels | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Download labels' config | |
| shell: bash | |
| run: | | |
| mkdir -p .tmp | |
| curl -LsS https://raw.githubusercontent.com/devops-infra/.github/master/.github/labels.yml -o .tmp/labels.yml | |
| - name: Update labels - dry run | |
| uses: crazy-max/[email protected] | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| yaml-file: .tmp/labels.yml | |
| dry-run: true | |
| lint: | |
| name: Run linters | |
| if: "!startsWith(github.ref, 'refs/heads/dependabot')" | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Docker Lint | |
| uses: luke142367/[email protected] | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Haskell Dockerfile Linter (Hadolint) | |
| uses: brpaz/[email protected] | |
| with: | |
| dockerfile: Dockerfile | |
| build: | |
| name: Build image | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: Build Docker image | |
| env: | |
| TERM: xterm-256color | |
| run: make build | |
| pull_request: | |
| name: Create Pull Request | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| with: | |
| fetch-depth: 0 | |
| - name: Download Pull Request template | |
| shell: bash | |
| run: | | |
| mkdir -p .tmp | |
| curl -LsS https://raw.githubusercontent.com/devops-infra/.github/master/PULL_REQUEST_TEMPLATE.md -o .tmp/PULL_REQUEST_TEMPLATE.md | |
| - name: Create pull request - bugfix (conditional) | |
| if: startsWith(github.ref, 'refs/heads/bugfix') | |
| uses: devops-infra/[email protected] | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| assignee: ${{ github.actor }} | |
| label: bugfix | |
| template: .tmp/PULL_REQUEST_TEMPLATE.md | |
| get_diff: true | |
| - name: Create pull request - dependency (conditional) | |
| if: startsWith(github.ref, 'refs/heads/dependency') | |
| uses: devops-infra/[email protected] | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| assignee: ${{ github.actor }} | |
| label: dependency | |
| template: .tmp/PULL_REQUEST_TEMPLATE.md | |
| get_diff: true | |
| - name: Create pull request - documentation (conditional) | |
| if: startsWith(github.ref, 'refs/heads/documentation') | |
| uses: devops-infra/[email protected] | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| assignee: ${{ github.actor }} | |
| label: documentation | |
| template: .tmp/PULL_REQUEST_TEMPLATE.md | |
| get_diff: true | |
| - name: Create pull request - feature (conditional) | |
| if: startsWith(github.ref, 'refs/heads/feature') | |
| uses: devops-infra/[email protected] | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| assignee: ${{ github.actor }} | |
| label: feature | |
| template: .tmp/PULL_REQUEST_TEMPLATE.md | |
| get_diff: true | |
| - name: Create pull request - test (conditional) | |
| if: startsWith(github.ref, 'refs/heads/test') | |
| uses: devops-infra/[email protected] | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| assignee: ${{ github.actor }} | |
| reviewer: ${{ github.actor }} | |
| label: test | |
| template: .tmp/PULL_REQUEST_TEMPLATE.md | |
| draft: true | |
| get_diff: true | |
| - name: Create pull request - other (conditional) | |
| if: "!startsWith(github.ref, 'refs/heads/bugfix') && !startsWith(github.ref, 'refs/heads/dependabot') && !startsWith(github.ref, 'refs/heads/dependency') && !startsWith(github.ref, 'refs/heads/documentation') && !startsWith(github.ref, 'refs/heads/feature') && !startsWith(github.ref, 'refs/heads/test')" | |
| uses: devops-infra/[email protected] | |
| with: | |
| github_token: ${{ secrets.GITHUB_TOKEN }} | |
| assignee: ${{ github.actor }} | |
| label: feature | |
| template: .tmp/PULL_REQUEST_TEMPLATE.md | |
| get_diff: true |