mirror of
https://github.com/super-linter/super-linter.git
synced 2024-11-24 15:11:09 -05:00
Fix deps and secret injection
Signed-off-by: Brett Logan <lindluni@github.com>
This commit is contained in:
parent
22cdb4a0e0
commit
2b8f626566
3 changed files with 5 additions and 6 deletions
2
.github/workflows/deploy-production.yml
vendored
2
.github/workflows/deploy-production.yml
vendored
|
@ -57,7 +57,7 @@ jobs:
|
||||||
load: true
|
load: true
|
||||||
push: false
|
push: false
|
||||||
secrets: |
|
secrets: |
|
||||||
GITHUB_TOKEN=GITHUB_TOKEN${{ secrets.GITHUB_TOKEN }}
|
GITHUB_TOKEN=${{ secrets.GITHUB_TOKEN }}
|
||||||
tags: |
|
tags: |
|
||||||
ghcr.io/github/super-linter:${{ matrix.images.container-image-id-prefix }}${{ github.sha }}
|
ghcr.io/github/super-linter:${{ matrix.images.container-image-id-prefix }}${{ github.sha }}
|
||||||
ghcr.io/github/super-linter:${{ matrix.images.container-image-id-prefix }}test
|
ghcr.io/github/super-linter:${{ matrix.images.container-image-id-prefix }}test
|
||||||
|
|
3
Makefile
3
Makefile
|
@ -111,7 +111,6 @@ docker:
|
||||||
--build-arg BUILD_DATE=$(shell date -u +'%Y-%m-%dT%H:%M:%SZ') \
|
--build-arg BUILD_DATE=$(shell date -u +'%Y-%m-%dT%H:%M:%SZ') \
|
||||||
--build-arg BUILD_REVISION=$(shell git rev-parse --short HEAD) \
|
--build-arg BUILD_REVISION=$(shell git rev-parse --short HEAD) \
|
||||||
--build-arg BUILD_VERSION=$(shell git rev-parse --short HEAD) \
|
--build-arg BUILD_VERSION=$(shell git rev-parse --short HEAD) \
|
||||||
--build-arg GITHUB_TOKEN="${GITHUB_PAT}" \
|
|
||||||
-t ghcr.io/github/super-linter .
|
-t ghcr.io/github/super-linter .
|
||||||
|
|
||||||
.phony: docker-buildx
|
.phony: docker-buildx
|
||||||
|
@ -121,5 +120,5 @@ docker-buildx:
|
||||||
--build-arg BUILD_DATE=$(shell date -u +'%Y-%m-%dT%H:%M:%SZ') \
|
--build-arg BUILD_DATE=$(shell date -u +'%Y-%m-%dT%H:%M:%SZ') \
|
||||||
--build-arg BUILD_REVISION=$(shell git rev-parse --short HEAD) \
|
--build-arg BUILD_REVISION=$(shell git rev-parse --short HEAD) \
|
||||||
--build-arg BUILD_VERSION=$(shell git rev-parse --short HEAD) \
|
--build-arg BUILD_VERSION=$(shell git rev-parse --short HEAD) \
|
||||||
--build-arg GITHUB_TOKEN="${GITHUB_PAT}" \
|
--secret id=GITHUB_TOKEN,env=GITHUB_TOKEN \
|
||||||
-t ghcr.io/github/super-linter .
|
-t ghcr.io/github/super-linter .
|
||||||
|
|
|
@ -13,13 +13,13 @@ curl --retry 5 --retry-delay 5 -sL -o "glibc-${GLIBC_VERSION}.apk" \
|
||||||
-H "Accept: application/octet-stream" \
|
-H "Accept: application/octet-stream" \
|
||||||
-H "Authorization: Bearer $(cat /run/secrets/GITHUB_TOKEN)" \
|
-H "Authorization: Bearer $(cat /run/secrets/GITHUB_TOKEN)" \
|
||||||
"${url}"
|
"${url}"
|
||||||
apk add --no-cache \
|
apk add --no-cache --force-overwrite \
|
||||||
bash \
|
bash \
|
||||||
ca-certificates \
|
ca-certificates \
|
||||||
"glibc-${GLIBC_VERSION}.apk" \
|
"glibc-${GLIBC_VERSION}.apk" \
|
||||||
gnupg \
|
gnupg \
|
||||||
php7 php7-curl php7-ctype php7-dom php7-iconv php7-json php7-mbstring \
|
php81 php81-curl php81-ctype php81-dom php81-iconv php81-mbstring \
|
||||||
php7-openssl php7-phar php7-simplexml php7-tokenizer php-xmlwriter \
|
php81-openssl php81-phar php81-simplexml php81-tokenizer php81-xmlwriter \
|
||||||
tar zstd
|
tar zstd
|
||||||
rm "glibc-${GLIBC_VERSION}.apk"
|
rm "glibc-${GLIBC_VERSION}.apk"
|
||||||
mkdir /tmp/libz
|
mkdir /tmp/libz
|
||||||
|
|
Loading…
Reference in a new issue