Build and publish dev release Docker image to Github Container Registry ghcr.io #4
lumber1000build-dev-release.yml
on: workflow_dispatch
build
/
...
/
Pre-build steps for project .
3s
build
/
...
/
owasp-scan-job
6m 49s
build
/
...
/
trivy-scan-job
42s
build
/
...
/
create-tag
5s
Annotations
1 warning
|
Sensitive data should not be used in the ARG or ENV commands:
Dockerfile#L7
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "CASSANDRA_PASSWORD")
More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
|