michael/michaelschiemer
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: improve image tag handling and add staging to security scan

Browse Source
This commit is contained in:
Michael Schiemer
2025-11-01 21:34:40 +01:00
parent c51e09c6b6
commit 9ecc88a0eb
2 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.gitea/workflows/build-image.yml
View File

@@ -828,7 +828,11 @@ jobs:
DEPLOYMENT_HOST="${{ env.DEPLOYMENT_HOST }}" DEPLOYMENT_HOST="${{ env.DEPLOYMENT_HOST }}"
REGISTRY="${{ env.REGISTRY }}" REGISTRY="${{ env.REGISTRY }}"
IMAGE_NAME="${{ env.IMAGE_NAME }}" IMAGE_NAME="${{ env.IMAGE_NAME }}"
IMAGE_TAG="${{ needs.build.outputs.image_tag || 'latest' }}"
if [ -z "$IMAGE_TAG" ] || [ "$IMAGE_TAG" = "null" ]; then
IMAGE_TAG="latest" IMAGE_TAG="latest"
fi
FULL_IMAGE="${REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}" FULL_IMAGE="${REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}"
STACK_PATH="~/deployment/stacks/staging" STACK_PATH="~/deployment/stacks/staging"

4
.gitea/workflows/security-scan.yml
View File

@@ -2,9 +2,9 @@ name: Security Vulnerability Scan
on: on:
push: push:
branches: [ main, develop ] branches: [ main, staging, develop ]
pull_request: pull_request:
branches: [ main, develop ] branches: [ main, staging, develop ]
schedule: schedule:
# Daily security scan at 2 AM UTC # Daily security scan at 2 AM UTC
- cron: '0 2 * * *' - cron: '0 2 * * *'