Merge pull request #7 from h2020charisma/ops-updates

- run ops workflows for branch `develop` too
- upgrade vulnerable dependencies
- other minor corrections

.github/workflows/ci.yml

@@ -5,9 +5,11 @@ on:  # yamllint disable-line rule:truthy
   push:
     branches:
       - main
+      - develop
   pull_request:
     branches:
       - main
+      - develop
   workflow_dispatch:
 
 env:
@@ -140,7 +142,7 @@ jobs:
       # Install the cosign tool except on PR
       # https://github.com/sigstore/cosign-installer
       - name: Install cosign
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        if: github.event_name != 'pull_request'
         uses: sigstore/[email protected]
         with:
           cosign-release: 'v2.2.4'
@@ -152,7 +154,7 @@ jobs:
       # Login against a Docker registry except on PR
       # https://github.com/docker/login-action
       - name: Log into registry ${{ env.REGISTRY }}
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        if: github.event_name != 'pull_request'
         uses: docker/[email protected]
         with:
           registry: ${{ env.REGISTRY }}
@@ -167,6 +169,7 @@ jobs:
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
           tags: |
+            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/develop' }}
             type=raw,value=stable,enable=${{ github.ref == 'refs/heads/main' }}
             type=ref,event=branch
             type=ref,event=tag
@@ -179,7 +182,7 @@ jobs:
         uses: docker/[email protected]
         with:
           context: .
-          push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+          push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=gha
@@ -191,7 +194,7 @@ jobs:
       # transparency data even for private images, pass --force to cosign below.
       # https://github.com/sigstore/cosign
       - name: Sign the published Docker image
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        if: github.event_name != 'pull_request'
         env:
           # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
           TAGS: ${{ steps.meta.outputs.tags }}

Dockerfile

@@ -31,7 +31,7 @@ RUN sed -i 's/^-e //' /tmp/requirements.txt \
     && pip install --no-cache-dir --upgrade -r /tmp/requirements.txt \
     && rm /tmp/requirements.txt
 
-COPY ./src/spectrastream  /app
+COPY ./src/spectrastream /app
 
 WORKDIR /app