Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/build.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:
# permissions:

container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:8a4c6c54d3cbdd3fd0207f629facc9df8b080605a6d30bd6474be5455633994e
image: ghcr.io/wolfi-dev/sdk:latest@sha256:8910a52f2228871f57e551999e15891b8fdee6200802124e17b017804af4fec7
# TODO: Deprivilege
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
Expand Down Expand Up @@ -102,7 +102,7 @@ jobs:

container:
# NOTE: This step only signs and uploads, so it doesn't need any privileges
image: ghcr.io/wolfi-dev/sdk:latest@sha256:8a4c6c54d3cbdd3fd0207f629facc9df8b080605a6d30bd6474be5455633994e
image: ghcr.io/wolfi-dev/sdk:latest@sha256:8910a52f2228871f57e551999e15891b8fdee6200802124e17b017804af4fec7

steps:
- uses: actions/checkout@v3
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/ci-build.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
run: |
# Copy wolfictl out of the wolfictl image and onto PATH
TMP=$(mktemp -d)
docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:8a4c6c54d3cbdd3fd0207f629facc9df8b080605a6d30bd6474be5455633994e -c "cp /usr/bin/wolfictl /out"
docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:8910a52f2228871f57e551999e15891b8fdee6200802124e17b017804af4fec7 -c "cp /usr/bin/wolfictl /out"
echo "$TMP" >> $GITHUB_PATH

# Assuming that we have a list of changed files such as `foo.yaml` and `bar.yaml`, this
Expand Down Expand Up @@ -55,7 +55,7 @@ jobs:
runs-on: wolfi-builder-spot-${{ matrix.arch }}
needs: changes
container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:8a4c6c54d3cbdd3fd0207f629facc9df8b080605a6d30bd6474be5455633994e
image: ghcr.io/wolfi-dev/sdk:latest@sha256:8910a52f2228871f57e551999e15891b8fdee6200802124e17b017804af4fec7
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --security-opt seccomp=unconfined --security-opt apparmor:unconfined

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/wolfictl-check-update.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ jobs:
- name: Check
id: check
if: ${{ steps.files.outputs.all_changed_files != '' }}
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:2525a165318ed14103d89a4d9e4adab449c241c7e41a221a128e45c8dbf75f37
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:eb8f5d1cf373318ec35a461edaa5f59ab1019ade9a9d770ec2c72a8caf90f7d8
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/wolfictl-lint.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -19,13 +19,13 @@ jobs:
- uses: actions/checkout@v3
- name: Lint
id: lint
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:2525a165318ed14103d89a4d9e4adab449c241c7e41a221a128e45c8dbf75f37
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:eb8f5d1cf373318ec35a461edaa5f59ab1019ade9a9d770ec2c72a8caf90f7d8
with:
entrypoint: wolfictl
args: lint --skip-rule no-makefile-entry-for-package
- name: Enforce YAML formatting
id: lint-yaml
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:2525a165318ed14103d89a4d9e4adab449c241c7e41a221a128e45c8dbf75f37
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:eb8f5d1cf373318ec35a461edaa5f59ab1019ade9a9d770ec2c72a8caf90f7d8
with:
entrypoint: wolfictl
args: lint yam
2 changes: 1 addition & 1 deletion .github/workflows/wolfictl-update-gh.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
steps:
- uses: actions/checkout@v3

- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:2525a165318ed14103d89a4d9e4adab449c241c7e41a221a128e45c8dbf75f37
- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:eb8f5d1cf373318ec35a461edaa5f59ab1019ade9a9d770ec2c72a8caf90f7d8
with:
entrypoint: wolfictl
args: update https://github.com/${{github.repository}} --release-monitoring-query=false --github-labels request-version-update --github-labels "automated pr"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/wolfictl-update-rm.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
steps:
- uses: actions/checkout@v3

- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:2525a165318ed14103d89a4d9e4adab449c241c7e41a221a128e45c8dbf75f37
- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:eb8f5d1cf373318ec35a461edaa5f59ab1019ade9a9d770ec2c72a8caf90f7d8
with:
entrypoint: wolfictl
args: update https://github.com/${{github.repository}} --github-release-query=false --github-labels request-version-update --github-labels "automated pr"
Expand Down