|
|
@@ -19,7 +19,7 @@ jobs:
|
|
|
|
run: apt-get update && apt-get install --yes curl
|
|
|
|
run: apt-get update && apt-get install --yes curl
|
|
|
|
- name: Install syft
|
|
|
|
- name: Install syft
|
|
|
|
env:
|
|
|
|
env:
|
|
|
|
SYFT_VERSION: "1.44.0" # renovate: datasource=github-releases depName=anchore/syft
|
|
|
|
SYFT_VERSION: "1.42.4" # renovate: datasource=github-releases depName=anchore/syft
|
|
|
|
run: |
|
|
|
|
run: |
|
|
|
|
OS="$(uname | tr '[:upper:]' '[:lower:]')"
|
|
|
|
OS="$(uname | tr '[:upper:]' '[:lower:]')"
|
|
|
|
ARCH="$(dpkg --print-architecture)"
|
|
|
|
ARCH="$(dpkg --print-architecture)"
|
|
|
@@ -31,9 +31,9 @@ jobs:
|
|
|
|
"https://github.com/anchore/syft/releases/download/v${SYFT_VERSION}/syft_${SYFT_VERSION}_${OS}_${ARCH}.deb"
|
|
|
|
"https://github.com/anchore/syft/releases/download/v${SYFT_VERSION}/syft_${SYFT_VERSION}_${OS}_${ARCH}.deb"
|
|
|
|
dpkg -i syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
|
|
|
|
dpkg -i syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
|
|
|
|
rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
|
|
|
|
rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
|
|
|
|
- uses: volker-raschek/cosign-installer@v4.1.2-rc3
|
|
|
|
- uses: sigstore/cosign-installer@v4.1.1
|
|
|
|
with:
|
|
|
|
with:
|
|
|
|
cosign-release: "v3.0.6" # renovate: datasource=github-tags depName=sigstore/cosign
|
|
|
|
cosign-release: "v2.6.3" # renovate: datasource=github-tags depName=sigstore/cosign
|
|
|
|
- uses: docker/setup-qemu-action@v4.0.0
|
|
|
|
- uses: docker/setup-qemu-action@v4.0.0
|
|
|
|
with:
|
|
|
|
with:
|
|
|
|
image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
|
|
|
|
image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
|
|
|
@@ -52,9 +52,9 @@ jobs:
|
|
|
|
GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
|
|
|
|
GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
|
|
|
|
GONOSUMDB: ${{ vars.GONOSUMDB }}
|
|
|
|
GONOSUMDB: ${{ vars.GONOSUMDB }}
|
|
|
|
GOPROXY: ${{ vars.GOPROXY }}
|
|
|
|
GOPROXY: ${{ vars.GOPROXY }}
|
|
|
|
uses: goreleaser/goreleaser-action@v7.2.2
|
|
|
|
uses: goreleaser/goreleaser-action@v7.1.0
|
|
|
|
with:
|
|
|
|
with:
|
|
|
|
version: v2.15.4 # renovate: datasource=github-releases depName=goreleaser/goreleaser
|
|
|
|
version: v2.15.3 # renovate: datasource=github-releases depName=goreleaser/goreleaser
|
|
|
|
args: release --clean
|
|
|
|
args: release --clean
|
|
|
|
|
|
|
|
|
|
|
|
sync-to-hub-docker-io:
|
|
|
|
sync-to-hub-docker-io:
|
|
|
|
CSRBot
