0
0
mirror of https://github.com/thegeeklab/wp-github-comment.git synced 2024-11-22 00:00:42 +00:00

ci: add read-only pull secret to security build

This commit is contained in:
Robert Kaussow 2024-11-13 23:50:54 +01:00
parent ec3c3a5078
commit aae1b59e72
Signed by: xoxys
GPG Key ID: 4E692A2EAECC03C0

View File

@ -12,6 +12,8 @@ steps:
containerfile: Containerfile.multiarch
output: type=oci,dest=oci/${CI_REPO_NAME},tar=false
repo: ${CI_REPO}
registry_config:
from_secret: DOCKER_REGISTRY_CONFIG_PULL
- name: security-scan
image: docker.io/aquasec/trivy