Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Ensure security vulnerabilities are patched in MCR images #233

Merged
merged 22 commits into from
Oct 26, 2023
Merged

Ensure security vulnerabilities are patched in MCR images #233

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
22 commits
Select commit Hold shift + click to select a range
df16967
copa action integration.
Tatsinnit Aug 24, 2023
2f484bc
Add version number and remove actual publishing of image.
Tatsinnit Aug 24, 2023
113f5f7
Test with non windows image.
Tatsinnit Aug 25, 2023
ef88925
Test with non windows image.
Tatsinnit Aug 25, 2023
7f2965f
update the latest sha.
Tatsinnit Sep 25, 2023
51680cd
Revert "update the latest sha."
peterbom Sep 26, 2023
50643d7
Only attempt to publish images in same GHCR repo as the code repo
peterbom Sep 4, 2023
f751846
show the vulnerability report in the output
peterbom Sep 4, 2023
57a8b7d
add scanning and patching into GHCR publishing pipeline
peterbom Sep 25, 2023
bf4a2ab
add scanning and patching into MCR publishing pipeline
peterbom Sep 26, 2023
0ad0952
update scheduled pipeline
peterbom Sep 26, 2023
8cd2006
fix syntax for output to GH env var in powershell
peterbom Sep 26, 2023
536108b
change to patch MCR, not GHCR
peterbom Sep 26, 2023
67ece06
rename GHCR pipeline file for consistency
peterbom Sep 26, 2023
c2b969f
add permission to allow az login
peterbom Sep 26, 2023
9f978b7
fix container registry reference for MCR patch workflow
peterbom Sep 26, 2023
1718e12
authenticate to ACR before running trivy scan
peterbom Sep 26, 2023
aa4d914
Ensure docker image exists locally before scanning
peterbom Sep 26, 2023
288de46
Merge GHCR and MCR publishing pipelines into one, to support Copa act…
peterbom Oct 6, 2023
3f5d9c5
Add GHCR package write permissions
peterbom Oct 6, 2023
b97f5dd
move workflow permissions to job level
peterbom Oct 6, 2023
3cdc0b4
update copa action version to one which retries curl command
peterbom Oct 18, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
94 changes: 0 additions & 94 deletions .github/workflows/build-and-publish.yml
View file
Open in desktop

This file was deleted.

112 changes: 0 additions & 112 deletions .github/workflows/build-publish-mcr.yml
View file
Open in desktop

This file was deleted.

Loading
Loading