@@ -109,56 +109,15 @@ jobs:
109109 with :
110110 images : ${{ env.DOCKER_REGISTRY }}/${{ env.DOCKER_IMAGE_NAME }}
111111
112- - name : Build Docker image
113- uses : docker/build-push-action@v6
114- with :
115- context : .
116- push : false
117- platforms : linux/amd64,linux/arm64
118- tags : ${{ steps.docker-metadata.outputs.tags }}
119- labels : ${{ steps.docker-metadata.outputs.labels }}
120- # Export the image to a tar so it can be imported into containerd so gokakashi can scan it
121- outputs : type=oci,dest=/tmp/image.tar
122-
123- - name : Import docker image into containerd store
124- run : |
125- ctr images import --base-name ${{ env.DOCKER_REGISTRY }}/${{ env.DOCKER_IMAGE_NAME }} --digests --all-platforms /tmp/image.tar
126-
127- - name : Get first docker tag for gokakashi
128- id : first-docker-tag
129- run : |
130- FIRST_TAG=$(echo "${{ steps.docker-metadata.outputs.tags }}" | head -n 1)
131- echo "First docker tag: $FIRST_TAG"
132- echo "tag=$FIRST_TAG" >> $GITHUB_OUTPUT
133-
134- - name : Scan docker image with gokakashi
135- uses :
shinobistack/[email protected] 136- with :
137- image : ${{ steps.first-docker-tag.outputs.tag }}
138- labels : agentKey=${{ github.run_id }}
139- policy : ci-platform
140- server : https://gokakashi-server.hasura-app.io
141- token : ${{ secrets.GOKAKASHI_API_TOKEN }}
142- cf_client_id : ${{ secrets.CF_ACCESS_CLIENT_ID }}
143- cf_client_secret : ${{ secrets.CF_ACCESS_CLIENT_SECRET }}
144- interval : 10
145- retries : 8
146-
147- - name : Upload Trivy report as artifact
148- uses : actions/upload-artifact@v4
149- with :
150- name : trivy-report
151- path : /tmp/trivy-report-*.json
152-
153- - name : Push Docker image
112+ - name : Build and Push Docker image
154113 uses : docker/build-push-action@v6
155114 with :
156115 context : .
157116 push : true
158117 platforms : linux/amd64,linux/arm64
159118 tags : ${{ steps.docker-metadata.outputs.tags }}
160119 labels : ${{ steps.docker-metadata.outputs.labels }}
161-
120+
162121 release-connector :
163122 name : Release connector
164123 runs-on : ubuntu-latest
0 commit comments