feat: security & integration hardening (ConfigMap + 5 gaps + CI/CD) #14

Closed
rock wants to merge 14 commits from feat/configmap-security-ci into main
Showing only changes of commit 9807e7ec97 - Show all commits
+10 -4
View File
@@ -8,17 +8,22 @@ on:
jobs: jobs:
build-and-push: build-and-push:
name: Build and Push Image name: Build and Push Image
# Use 'rust' runner (not 'docker')
# Available runners in Forgejo: golang, rust, node
# rust runner provides: Rust 1.83-bookworm + Docker-in-Docker for image builds
runs-on: rust runs-on: rust
container:
image: docker:27-dind
options: --privileged
steps: steps:
- name: Checkout code - name: Checkout code
uses: actions/checkout@v4 run: |
apk add --no-cache git
git clone https://git.riotpiao.com:2222/rock/poimen-memory.git /workspace
cd /workspace
git checkout ${{ github.sha }}
- name: Get commit info - name: Get commit info
id: info id: info
run: | run: |
cd /workspace
SHORT_SHA=$(git rev-parse --short HEAD) SHORT_SHA=$(git rev-parse --short HEAD)
COMMIT_MSG=$(git log -1 --pretty=%B | head -1) COMMIT_MSG=$(git log -1 --pretty=%B | head -1)
echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT echo "short_sha=${SHORT_SHA}" >> $GITHUB_OUTPUT
@@ -32,6 +37,7 @@ jobs:
- name: Build image - name: Build image
run: | run: |
cd /workspace
docker build \ docker build \
--tag forgejo.riotpiao.com/rock/poimen-memory:${{ steps.info.outputs.short_sha }} \ --tag forgejo.riotpiao.com/rock/poimen-memory:${{ steps.info.outputs.short_sha }} \
--tag forgejo.riotpiao.com/rock/poimen-memory:latest \ --tag forgejo.riotpiao.com/rock/poimen-memory:latest \