Skip to content
Closed
Show file tree
Hide file tree
Changes from 3 commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions .github/workflows/docker-build-push.yml
Original file line number Diff line number Diff line change
Expand Up @@ -19,7 +19,7 @@
name: Build ${{ matrix.app.name }}
# skip building images for merge groups as they are already built on PRs and main
if: github.event_name != 'merge_group'
runs-on: ubuntu-latest
runs-on: blacksmith-2vcpu-ubuntu-2404
permissions:
contents: read
packages: write
Expand All @@ -30,8 +30,8 @@
- name: Checkout code
uses: actions/checkout@v6

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Setup Blacksmith Builder
uses: useblacksmith/setup-docker-builder@v1

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Build Docker Images' step
Uses Step
uses 'useblacksmith/setup-docker-builder' with ref 'v1', not a pinned commit hash

- name: Log in to GHCR
uses: docker/login-action@v3
Expand All @@ -41,7 +41,7 @@
password: ${{ secrets.GITHUB_TOKEN }}

- name: Build and push ${{ matrix.app.name }} Docker image
uses: docker/build-push-action@v6
uses: useblacksmith/build-push-action@v2

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Build Docker Images' step
Uses Step
uses 'useblacksmith/build-push-action' with ref 'v2', not a pinned commit hash
with:
context: .
file: ${{ matrix.app.dockerfile }}
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/docker-tests.yml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:
permissions:
contents: read
name: Docker E2E Tests
runs-on: ubuntu-latest
runs-on: blacksmith-2vcpu-ubuntu-2404
steps:
- uses: actions/checkout@v6
- name: set up go
Expand All @@ -37,7 +37,7 @@ jobs:
name: Docker Upgrade E2E Tests
permissions:
contents: read
runs-on: ubuntu-latest
runs-on: blacksmith-2vcpu-ubuntu-2404
steps:
- uses: actions/checkout@v6
- name: set up go
Expand Down
8 changes: 4 additions & 4 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -69,16 +69,16 @@
build-and-push:
name: Build and Push Docker Image
needs: parse-tag
runs-on: ubuntu-latest
runs-on: blacksmith-4vcpu-ubuntu-2404
permissions:
contents: read
packages: write
steps:
- name: Checkout code
uses: actions/checkout@v6

- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Setup Blacksmith Builder
uses: useblacksmith/setup-docker-builder@v1

- name: Log in to GHCR
uses: docker/login-action@v3
Expand All @@ -88,7 +88,7 @@
password: ${{ secrets.GITHUB_TOKEN }}

- name: Build and push Docker image
uses: docker/build-push-action@v6
uses: useblacksmith/build-push-action@v2
with:
context: .
file: ${{ needs.parse-tag.outputs.dockerfile }}
Expand Down
10 changes: 4 additions & 6 deletions .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,7 @@
e2e-tests:
name: Run E2E System Tests
needs: build_all-apps
runs-on: ubuntu-latest
runs-on: blacksmith-2vcpu-ubuntu-2404
permissions:
contents: read
packages: read
Expand All @@ -82,17 +82,15 @@
uses: actions/setup-go@v6
with:
go-version-file: ./go.mod
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Setup Blacksmith Builder
uses: useblacksmith/setup-docker-builder@v1

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium test

Unpinned 3rd party Action 'Tests / Code Coverage' step
Uses Step
uses 'useblacksmith/setup-docker-builder' with ref 'v1', not a pinned commit hash
- name: Build evstack:local-dev (cached)
uses: docker/build-push-action@v6
uses: useblacksmith/build-push-action@v2

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium test

Unpinned 3rd party Action 'Tests / Code Coverage' step
Uses Step
uses 'useblacksmith/build-push-action' with ref 'v2', not a pinned commit hash
with:
context: .
file: apps/testapp/Dockerfile
load: true
tags: evstack:local-dev
cache-from: type=gha
cache-to: type=gha,mode=max
- name: E2E Tests
run: make test-e2e

Expand Down
Loading