diff --git a/.gitea/workflows/release.yml b/.gitea/workflows/release.yml index 09e4a6e..0ffc307 100644 --- a/.gitea/workflows/release.yml +++ b/.gitea/workflows/release.yml @@ -1,4 +1,4 @@ -name: Build huber-stuck web image +name: Build stuck web image on: push: @@ -22,12 +22,25 @@ jobs: - name: Set up Docker Buildx uses: docker/setup-buildx-action@v2 - - name: Log into registry + - name: Login to Docker Hub uses: docker/login-action@v3 with: - registry: ${{ secrets.REGISTRY_URL }} - username: ${{ secrets.REGISTRY_USER }} - password: ${{ secrets.REGISTRY_PASS }} + username: ${{ vars.DOCKERHUB_USER }} + password: ${{ vars.DOCKERHUB_TOKEN }} + + - name: Log into CS registry + uses: docker/login-action@v3 + with: + registry: ${{ vars.CS_REGISTRY_URL }} + username: ${{ vars.CS_REGISTRY_USER }} + password: ${{ vars.CS_REGISTRY_PASS }} + + - name: Log into local registry + uses: docker/login-action@v3 + with: + registry: ${{ vars.LOCAL_REGISTRY_URL }} + username: ${{ vars.LOCAL_REGISTRY_USER }} + password: ${{ vars.LOCAL_REGISTRY_PASS }} - name: Extract Docker metadata id: meta @@ -40,19 +53,19 @@ jobs: env: ACTIONS_RUNTIME_TOKEN: '' with: - tags: ${{ secrets.REGISTRY_URL }}${{ env.IMAGE }}:latest + tags: ${{ vars.LOCAL_REGISTRY_URL }}${{ env.IMAGE }}:latest push: true - name: Scan image uses: anchore/scan-action@v6 id: scan with: - image: ${{ secrets.REGISTRY_URL }}${{ env.IMAGE }}:latest + image: ${{ vars.LOCAL_REGISTRY_URL }}${{ env.IMAGE }}:latest fail-build: false output-format: table severity-cutoff: critical - registry-username: ${{ secrets.REGISTRY_USER }} - registry-password: ${{ secrets.REGISTRY_PASS }} + registry-username: ${{ vars.LOCAL_REGISTRY_USER }} + registry-password: ${{ vars.LOCAL_REGISTRY_PASS }} grype-version: 'v0.90.0' - name: Inspect file @@ -63,4 +76,3 @@ jobs: with: name: scan-result path: ${{ steps.scan.outputs.table }} -