Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/build-world.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:
fail-fast: false

container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:4e17eeb8fe1d34d29777e5cbf0a2df1f870b4b1b477cbe634906e2ef0ad27e4e
image: ghcr.io/wolfi-dev/sdk:latest@sha256:26f510522abb4923875e8424c611e41cdf5fd017117f1a88e234ec2f8da6a25c
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --security-opt seccomp=unconfined --security-opt apparmor:unconfined

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/build.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
# permissions:

container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:4e17eeb8fe1d34d29777e5cbf0a2df1f870b4b1b477cbe634906e2ef0ad27e4e
image: ghcr.io/wolfi-dev/sdk:latest@sha256:26f510522abb4923875e8424c611e41cdf5fd017117f1a88e234ec2f8da6a25c
# TODO: Deprivilege
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
Expand Down Expand Up @@ -104,7 +104,7 @@ jobs:

container:
# NOTE: This step only signs and uploads, so it doesn't need any privileges
image: ghcr.io/wolfi-dev/sdk:latest@sha256:4e17eeb8fe1d34d29777e5cbf0a2df1f870b4b1b477cbe634906e2ef0ad27e4e
image: ghcr.io/wolfi-dev/sdk:latest@sha256:26f510522abb4923875e8424c611e41cdf5fd017117f1a88e234ec2f8da6a25c

steps:
- uses: actions/checkout@v3
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/ci-build.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
run: |
# Copy wolfictl out of the wolfictl image and onto PATH
TMP=$(mktemp -d)
docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:4e17eeb8fe1d34d29777e5cbf0a2df1f870b4b1b477cbe634906e2ef0ad27e4e -c "cp /usr/bin/wolfictl /out"
docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:26f510522abb4923875e8424c611e41cdf5fd017117f1a88e234ec2f8da6a25c -c "cp /usr/bin/wolfictl /out"
echo "$TMP" >> $GITHUB_PATH

# Assuming that we have a list of changed files such as `foo.yaml` and `bar.yaml`, this
Expand Down Expand Up @@ -57,7 +57,7 @@ jobs:
- ${{ matrix.arch }}
needs: changes
container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:4e17eeb8fe1d34d29777e5cbf0a2df1f870b4b1b477cbe634906e2ef0ad27e4e
image: ghcr.io/wolfi-dev/sdk:latest@sha256:26f510522abb4923875e8424c611e41cdf5fd017117f1a88e234ec2f8da6a25c
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --security-opt seccomp=unconfined --security-opt apparmor:unconfined

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dag-push-production.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -156,7 +156,7 @@ jobs:
--cpu=30 --ram=100Gi \
--bucket=${BUCKET} \
--src-bucket=${SRC_BUCKET} \
--sdk-image ghcr.io/wolfi-dev/sdk:latest@sha256:4e17eeb8fe1d34d29777e5cbf0a2df1f870b4b1b477cbe634906e2ef0ad27e4e \
--sdk-image ghcr.io/wolfi-dev/sdk:latest@sha256:26f510522abb4923875e8424c611e41cdf5fd017117f1a88e234ec2f8da6a25c \
--pending-timeout=20m \
--secret-key \
--arch=arm64
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/push-production.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,7 @@ jobs:
run: |
# Copy wolfictl out of the wolfictl image and onto PATH
TMP=$(mktemp -d)
docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:4e17eeb8fe1d34d29777e5cbf0a2df1f870b4b1b477cbe634906e2ef0ad27e4e -c "cp /usr/bin/wolfictl /out"
docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:26f510522abb4923875e8424c611e41cdf5fd017117f1a88e234ec2f8da6a25c -c "cp /usr/bin/wolfictl /out"
echo "$TMP" >> $GITHUB_PATH

- name: 'Build Wolfi'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/wolfictl-check-update.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
- name: Check
id: check
if: ${{ steps.files.outputs.all_changed_files != '' }}
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:c90c51e5c87a71142c660e1842386b4357e1edb97f902c31e27720d94175b78a
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:3023aa69f01be4afcc82ca582af1196a4c8479c50f5f910080dd46a847e58dd8
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/wolfictl-lint.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -19,13 +19,13 @@ jobs:
- uses: actions/checkout@v3
- name: Lint
id: lint
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:c90c51e5c87a71142c660e1842386b4357e1edb97f902c31e27720d94175b78a
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:3023aa69f01be4afcc82ca582af1196a4c8479c50f5f910080dd46a847e58dd8
with:
entrypoint: wolfictl
args: lint --skip-rule no-makefile-entry-for-package
- name: Enforce YAML formatting
id: lint-yaml
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:c90c51e5c87a71142c660e1842386b4357e1edb97f902c31e27720d94175b78a
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:3023aa69f01be4afcc82ca582af1196a4c8479c50f5f910080dd46a847e58dd8
with:
entrypoint: wolfictl
args: lint yam
2 changes: 1 addition & 1 deletion .github/workflows/wolfictl-update-gh.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
steps:
- uses: actions/checkout@v3

- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:c90c51e5c87a71142c660e1842386b4357e1edb97f902c31e27720d94175b78a
- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:3023aa69f01be4afcc82ca582af1196a4c8479c50f5f910080dd46a847e58dd8
with:
entrypoint: wolfictl
args: update https://github.com/${{github.repository}} --release-monitoring-query=false --github-labels request-version-update --github-labels "automated pr"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/wolfictl-update-rm.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
steps:
- uses: actions/checkout@v3

- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:c90c51e5c87a71142c660e1842386b4357e1edb97f902c31e27720d94175b78a
- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:3023aa69f01be4afcc82ca582af1196a4c8479c50f5f910080dd46a847e58dd8
with:
entrypoint: wolfictl
args: update https://github.com/${{github.repository}} --github-release-query=false --github-labels request-version-update --github-labels "automated pr"
Expand Down