feat: security & integration hardening (ConfigMap + 5 gaps + CI/CD) #14
@@ -8,17 +8,22 @@ on:
|
||||
jobs:
|
||||
build-and-push:
|
||||
name: Build and Push Image
|
||||
# Use 'rust' runner (not 'docker')
|
||||
# Available runners in Forgejo: golang, rust, node
|
||||
# rust runner provides: Rust 1.83-bookworm + Docker-in-Docker for image builds
|
||||
runs-on: rust
|
||||
container:
|
||||
image: docker:27-dind
|
||||
options: --privileged
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
run: |
|
||||
apk add --no-cache git
|
||||
git clone https://git.riotpiao.com:2222/rock/poimen-memory.git /workspace
|
||||
cd /workspace
|
||||
git checkout ${{ github.sha }}
|
||||
|
||||
- name: Get commit info
|
||||
id: info
|
||||
run: |
|
||||
cd /workspace
|
||||
SHORT_SHA=$(git rev-parse --short HEAD)
|
||||
COMMIT_MSG=$(git log -1 --pretty=%B | head -1)
|
||||
echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT
|
||||
@@ -32,6 +37,7 @@ jobs:
|
||||
|
||||
- name: Build image
|
||||
run: |
|
||||
cd /workspace
|
||||
docker build \
|
||||
--tag forgejo.riotpiao.com/rock/poimen-memory:${{ steps.info.outputs.short_sha }} \
|
||||
--tag forgejo.riotpiao.com/rock/poimen-memory:latest \
|
||||
|
||||
Reference in New Issue
Block a user