From 3f512a03e7704cae319f0bb72d99add112519738 Mon Sep 17 00:00:00 2001 From: Tuomas Katila Date: Wed, 4 Sep 2024 13:29:16 +0300 Subject: [PATCH] disable stuff Signed-off-by: Tuomas Katila --- .github/workflows/devel.yaml | 78 +++++++++++++++--------------- .github/workflows/lib-publish.yaml | 46 +++++++++--------- 2 files changed, 62 insertions(+), 62 deletions(-) diff --git a/.github/workflows/devel.yaml b/.github/workflows/devel.yaml index 3708f2005..ae3f93e48 100644 --- a/.github/workflows/devel.yaml +++ b/.github/workflows/devel.yaml @@ -9,50 +9,50 @@ permissions: pull-requests: read jobs: - trivy: - permissions: - actions: read - contents: read - security-events: write - uses: "./.github/workflows/lib-trivy.yaml" - with: - upload-to-github-security-tab: true - - validate: - uses: "./.github/workflows/lib-validate.yaml" - - codeql: - permissions: - actions: read - contents: read - security-events: write - uses: "./.github/workflows/lib-codeql.yaml" - - scorecard: - permissions: - contents: read - id-token: write - security-events: write - uses: "./.github/workflows/lib-scorecard.yaml" - - build: - needs: - - validate - - trivy - uses: "./.github/workflows/lib-build.yaml" - - e2e: - needs: - - build - uses: "./.github/workflows/lib-e2e.yaml" + # trivy: + # permissions: + # actions: read + # contents: read + # security-events: write + # uses: "./.github/workflows/lib-trivy.yaml" + # with: + # upload-to-github-security-tab: true + + # validate: + # uses: "./.github/workflows/lib-validate.yaml" + + # codeql: + # permissions: + # actions: read + # contents: read + # security-events: write + # uses: "./.github/workflows/lib-codeql.yaml" + + # scorecard: + # permissions: + # contents: read + # id-token: write + # security-events: write + # uses: "./.github/workflows/lib-scorecard.yaml" + + # build: + # needs: + # - validate + # - trivy + # uses: "./.github/workflows/lib-build.yaml" + + # e2e: + # needs: + # - build + # uses: "./.github/workflows/lib-e2e.yaml" # devel image push publish: permissions: contents: read id-token: write - needs: - - e2e - - build + # needs: + # - e2e + # - build uses: "./.github/workflows/lib-publish.yaml" secrets: inherit diff --git a/.github/workflows/lib-publish.yaml b/.github/workflows/lib-publish.yaml index dd9e23384..e829d0991 100644 --- a/.github/workflows/lib-publish.yaml +++ b/.github/workflows/lib-publish.yaml @@ -103,26 +103,26 @@ jobs: sudo freshclam docker save $FULL_IMAGE -o $IMG_FILE clamscan $IMG_FILE - - name: Test image base layer - # Don't run base layer check for selected images - if: ${{ !contains(fromJson(env.no_base_check), matrix.image) }} - run: IMG=${{ inputs.registry }}/${{ matrix.image }}:${{ inputs.image_tag }} make test-image-base-layer BUILDER=docker - - name: Login - uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 - with: - username: ${{ secrets.DOCKERHUB_USER }} - password: ${{ secrets.DOCKERHUB_PASS }} - - name: Push - run: docker push ${{ inputs.registry }}/${{ matrix.image }}:${{ inputs.image_tag }} - - name: Get image digest - if: ${{ inputs.image_tag != 'devel' }} - id: digest - run: | - echo "image_sha=$(docker inspect --format='{{index .RepoDigests 0}}' ${{ inputs.registry }}/${{ matrix.image }}:${{ inputs.image_tag }})" >> $GITHUB_OUTPUT - - name: Install cosign - if: ${{ inputs.image_tag != 'devel' }} - uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 #v3.6.0 - - name: Keyless image sign - if: ${{ inputs.image_tag != 'devel' }} - run: | - cosign sign --yes ${{ steps.digest.outputs.image_sha }} + # - name: Test image base layer + # # Don't run base layer check for selected images + # if: ${{ !contains(fromJson(env.no_base_check), matrix.image) }} + # run: IMG=${{ inputs.registry }}/${{ matrix.image }}:${{ inputs.image_tag }} make test-image-base-layer BUILDER=docker + # - name: Login + # uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3 + # with: + # username: ${{ secrets.DOCKERHUB_USER }} + # password: ${{ secrets.DOCKERHUB_PASS }} + # - name: Push + # run: docker push ${{ inputs.registry }}/${{ matrix.image }}:${{ inputs.image_tag }} + # - name: Get image digest + # if: ${{ inputs.image_tag != 'devel' }} + # id: digest + # run: | + # echo "image_sha=$(docker inspect --format='{{index .RepoDigests 0}}' ${{ inputs.registry }}/${{ matrix.image }}:${{ inputs.image_tag }})" >> $GITHUB_OUTPUT + # - name: Install cosign + # if: ${{ inputs.image_tag != 'devel' }} + # uses: sigstore/cosign-installer@4959ce089c160fddf62f7b42464195ba1a56d382 #v3.6.0 + # - name: Keyless image sign + # if: ${{ inputs.image_tag != 'devel' }} + # run: | + # cosign sign --yes ${{ steps.digest.outputs.image_sha }}