humocs-man/fluffy-pancake
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

.gitea/workflows/build.yml aktualisiert

Browse Source
This commit is contained in:
humocs-man
2026-09-05 21:01:48 +00:00
parent 5a49386921
commit d99a4ba3c4
1 changed files with 9 additions and 45 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/build.yml
+8 -44
View File
@@ -95,39 +95,16 @@ jobs:
context: .
file: ./Containerfile
platforms: linux/amd64
push: ${{ github.event_name != 'pull_request' }}
tags: ${{ steps.metadata.outputs.tags }}
labels: ${{ steps.metadata.outputs.labels }}
pull: true
oci-mediatypes: true
compression: zstd
provenance: false
sbom: false
cache-from: ${{ github.event_name != 'pull_request' && format('type=registry,ref={0}/{1}:buildcache-amd64-main', env.IMAGE_REGISTRY, env.IMAGE_NAME) || '' }}
cache-to: ${{ github.event_name != 'pull_request' && format('type=registry,ref={0}/{1}:buildcache-amd64-main,mode=max', env.IMAGE_REGISTRY, env.IMAGE_NAME) || '' }}
build-args: |
BUILDKIT_OCI_MEDIATYPE=true
outputs: ${{ github.event_name != 'pull_request' && format('type=registry,push=true,oci-mediatypes=true,compression=zstd,compression-args=binary-path=/usr/bin/go-zstd-chunked') || '' }}
- name: Inspect pushed image
if: github.event_name != 'pull_request' && github.ref_name == 'main'
run: |
set -euo pipefail
IMAGE="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}"
DIGEST="${{ steps.build_image.outputs.digest }}"
echo "Buildx digest:"
echo "${DIGEST}"
echo
echo "Registry digest:"
docker buildx imagetools inspect \
"${IMAGE}:${DEFAULT_TAG}"
cache-from: type=registry,ref=${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:buildcache-amd64-main
cache-to: type=registry,ref=${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}:buildcache-amd64-main,mode=max
outputs: type=registry,oci-mediatypes=true,compression=zstd,compression-args=binary-path=/usr/bin/go-zstd-chunked
- name: Install gettext dependencies
if: github.event_name != 'pull_request' && github.ref_name == 'main'
@@ -165,7 +142,7 @@ jobs:
--registry-referrers-mode=legacy \
"${IMAGE}@${DIGEST}"
- name: Debug container signature
- name: Verify container image
if: github.event_name != 'pull_request' && github.ref_name == 'main'
run: |
set -euo pipefail
@@ -173,23 +150,10 @@ jobs:
IMAGE="${{ env.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }}"
DIGEST="${{ steps.build_image.outputs.digest }}"
echo "Image: ${IMAGE}"
echo "Digest: ${DIGEST}"
test -f configs/cosign.pub
echo
echo "=== Cosign version ==="
cosign version
echo
echo "=== Cosign tree ==="
cosign tree \
--registry-referrers-mode=legacy \
"${IMAGE}@${DIGEST}"
echo
echo "=== Cosign download signature ==="
cosign download signature \
- -registry-referrers-mode=legacy \
cosign verify \
--key configs/cosign.pub \
"${IMAGE}@${DIGEST}"
- name: Post-Build Cleanup