From b53e50186b262680ccaf5e178f072230f987e96a Mon Sep 17 00:00:00 2001 From: Robert Kaussow Date: Sat, 26 Oct 2024 20:55:54 +0200 Subject: [PATCH] ci: replace deprecated workflow syntax --- .woodpecker/build-container.yml | 8 +++++--- .woodpecker/docs.yml | 19 ++++++++----------- 2 files changed, 13 insertions(+), 14 deletions(-) diff --git a/.woodpecker/build-container.yml b/.woodpecker/build-container.yml index 356b69a..51fca0b 100644 --- a/.woodpecker/build-container.yml +++ b/.woodpecker/build-container.yml @@ -14,7 +14,8 @@ steps: repo: thegeeklab/${CI_REPO_NAME} - name: security-scan - image: ghcr.io/aquasecurity/trivy + image: docker.io/aquasec/trivy + depends_on: security-build commands: - trivy -v - trivy image --input oci/${CI_REPO_NAME} @@ -24,10 +25,11 @@ steps: TRIVY_NO_PROGRESS: "true" TRIVY_SEVERITY: HIGH,CRITICAL TRIVY_TIMEOUT: 1m + TRIVY_DB_REPOSITORY: docker.io/aquasec/trivy-db:2 - name: publish-dockerhub image: quay.io/thegeeklab/wp-docker-buildx:5 - group: container + depends_on: security-scan settings: auto_tag: true containerfile: Containerfile @@ -45,7 +47,7 @@ steps: - name: publish-quay image: quay.io/thegeeklab/wp-docker-buildx:5 - group: container + depends_on: security-scan settings: auto_tag: true containerfile: Containerfile diff --git a/.woodpecker/docs.yml b/.woodpecker/docs.yml index 9346779..130cec1 100644 --- a/.woodpecker/docs.yml +++ b/.woodpecker/docs.yml @@ -8,13 +8,11 @@ when: steps: - name: markdownlint image: quay.io/thegeeklab/markdownlint-cli - group: test commands: - markdownlint 'README.md' - name: spellcheck image: quay.io/thegeeklab/alpine-tools - group: test commands: - spellchecker --files '_docs/**/*.md' 'README.md' -d .dictionary -p spell indefinite-article syntax-urls environment: @@ -22,18 +20,17 @@ steps: - name: link-validation image: docker.io/lycheeverse/lychee - group: test commands: - lychee --no-progress --format detailed README.md - name: pushrm-dockerhub image: docker.io/chko/docker-pushrm:1 - secrets: - - source: docker_password - target: DOCKER_PASS - - source: docker_username - target: DOCKER_USER + depends_on: [markdownlint, spellcheck, link-validation] environment: + DOCKER_PASS: + from_secret: docker_password + DOCKER_USER: + from_secret: docker_username PUSHRM_FILE: README.md PUSHRM_SHORT: Custom image for lighthouse-ci PUSHRM_TARGET: thegeeklab/${CI_REPO_NAME} @@ -45,10 +42,10 @@ steps: - name: pushrm-quay image: docker.io/chko/docker-pushrm:1 - secrets: - - source: quay_token - target: APIKEY__QUAY_IO + depends_on: [markdownlint, spellcheck, link-validation] environment: + APIKEY__QUAY_IO: + from_secret: quay_token PUSHRM_FILE: README.md PUSHRM_TARGET: quay.io/thegeeklab/${CI_REPO_NAME} when: