feat: security & integration hardening (ConfigMap + 5 gaps + CI/CD) #14

Closed
rock wants to merge 14 commits from feat/configmap-security-ci into main
Showing only changes of commit 9807e7ec97 - Show all commits
+10 -4
View File
@@ -8,17 +8,22 @@ on:
jobs:
build-and-push:
name: Build and Push Image
# Use 'rust' runner (not 'docker')
# Available runners in Forgejo: golang, rust, node
# rust runner provides: Rust 1.83-bookworm + Docker-in-Docker for image builds
runs-on: rust
container:
image: docker:27-dind
options: --privileged
steps:
- name: Checkout code
uses: actions/checkout@v4
run: |
apk add --no-cache git
git clone https://git.riotpiao.com:2222/rock/poimen-memory.git /workspace
cd /workspace
git checkout ${{ github.sha }}
- name: Get commit info
id: info
run: |
cd /workspace
SHORT_SHA=$(git rev-parse --short HEAD)
COMMIT_MSG=$(git log -1 --pretty=%B | head -1)
echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT
@@ -32,6 +37,7 @@ jobs:
- name: Build image
run: |
cd /workspace
docker build \
--tag forgejo.riotpiao.com/rock/poimen-memory:${{ steps.info.outputs.short_sha }} \
--tag forgejo.riotpiao.com/rock/poimen-memory:latest \