502 repair the in validation and refused upload modification #475

Workflow file for this run

.github/workflows/docker-publish.yml at c4200d3

	name: Docker

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.

	on:
	push:
	branches: ["main"]
	pull_request:
	branches: ["main"]
	types: [opened, synchronize, reopened]

	env:
	# Use docker.io for Docker Hub if empty
	REGISTRY: ghcr.io
	# github.repository as <account>/<repo>
	IMAGE_NAME: ${{ github.repository }}

	jobs:
	# analyze:
	# name: Analyze (${{ matrix.language }})
	# # Runner size impacts CodeQL analysis time. To learn more, please see:
	# # - https://gh.io/recommended-hardware-resources-for-running-codeql
	# # - https://gh.io/supported-runners-and-hardware-resources
	# # - https://gh.io/using-larger-runners (GitHub.com only)
	# # Consider using larger runners or machines with greater resources for possible analysis time improvements.
	# runs-on: ubuntu-latest
	# permissions:
	# # required for all workflows
	# security-events: write

	# # required to fetch internal or private CodeQL packs
	# packages: read

	# # only required for workflows in private repositories
	# actions: read
	# contents: read

	# strategy:
	# fail-fast: false
	# matrix:
	# include:
	# - language: javascript-typescript
	# build-mode: none
	# # CodeQL supports the following values keywords for 'language': 'c-cpp', 'csharp', 'go', 'java-kotlin', 'javascript-typescript', 'python', 'ruby', 'swift'
	# # Use `c-cpp` to analyze code written in C, C++ or both
	# # Use 'java-kotlin' to analyze code written in Java, Kotlin or both
	# # Use 'javascript-typescript' to analyze code written in JavaScript, TypeScript or both
	# # To learn more about changing the languages that are analyzed or customizing the build mode for your analysis,
	# # see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/customizing-your-advanced-setup-for-code-scanning.
	# # If you are analyzing a compiled language, you can modify the 'build-mode' for that language to customize how
	# # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
	# steps:
	# - name: Checkout repository
	# uses: actions/checkout@v4

	# # Initializes the CodeQL tools for scanning.
	# - name: Initialize CodeQL
	# uses: github/codeql-action/init@v3
	# with:
	# languages: ${{ matrix.language }}
	# build-mode: ${{ matrix.build-mode }}
	# # If you wish to specify custom queries, you can do so here or in a config file.
	# # By default, queries listed here will override any specified in a config file.
	# # Prefix the list here with "+" to use these queries and those in the config file.

	# # For more details on CodeQL's query packs, refer to: https://docs.github.com/en/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/configuring-code-scanning#using-queries-in-ql-packs
	# # queries: security-extended,security-and-quality

	# # If the analyze step fails for one of the languages you are analyzing with
	# # "We were unable to automatically build your code", modify the matrix above
	# # to set the build mode to "manual" for that language. Then modify this step
	# # to build your code.
	# # ℹ️ Command-line programs to run using the OS shell.
	# # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
	# - if: matrix.build-mode == 'manual'
	# shell: bash
	# run: \|
	# echo 'If you are using a "manual" build mode for one or more of the' \
	# 'languages you are analyzing, replace this with the commands to build' \
	# 'your code, for example:'
	# echo ' make bootstrap'
	# echo ' make release'
	# exit 1

	# - name: Perform CodeQL Analysis
	# uses: github/codeql-action/analyze@v3
	# with:
	# category: "/language:${{matrix.language}}"

	# sonarcloud:
	# needs: analyze
	# name: SonarQube Cloud
	# runs-on: ubuntu-latest
	# steps:
	# - uses: actions/checkout@v4
	# with:
	# fetch-depth: 0 # Shallow clones should be disabled for a better relevancy of analysis
	# - name: SonarQube Cloud Scan
	# uses: SonarSource/sonarcloud-github-action@master
	# env:
	# GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Needed to get PR information, if any
	# SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}

	# build-to-prod:
	# needs: sonarcloud
	# runs-on: ubuntu-latest
	# permissions:
	# contents: read
	# packages: write
	# # This is used to complete the identity challenge
	# # with sigstore/fulcio when running outside of PRs.
	# id-token: write

	# steps:
	# - name: Checkout repository
	# uses: actions/checkout@v4

	# # Install the cosign tool except on PR
	# # https://github.com/sigstore/cosign-installer
	# - name: Install cosign
	# if: github.event_name != 'pull_request'
	# uses: sigstore/cosign-installer@v3

	# # Set up BuildKit Docker container builder to be able to build
	# # multi-platform images and export cache
	# # https://github.com/docker/setup-buildx-action
	# - name: Set up Docker Buildx
	# uses: docker/setup-buildx-action@v3 # v3.0.0

	# # Login against a Docker registry except on PR
	# # https://github.com/docker/login-action
	# - name: Log into registry ${{ env.REGISTRY }}
	# if: github.event_name != 'pull_request'
	# uses: docker/login-action@v3 # v3.0.0
	# with:
	# registry: ${{ env.REGISTRY }}
	# username: ${{ github.actor }}
	# password: ${{ secrets.GITHUB_TOKEN }}

	# # Extract metadata (tags, labels) for Docker
	# # https://github.com/docker/metadata-action
	# - name: Extract Docker metadata
	# id: meta
	# uses: docker/metadata-action@v5
	# with:
	# images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

	# # Build and push Docker image with Buildx (don't push on PR)
	# # https://github.com/docker/build-push-action
	# - name: Build and push Docker image
	# id: build-and-push
	# uses: docker/build-push-action@v5 # v5.0.0
	# with:
	# context: .
	# file: docker/dockerfileGHA.prod/Dockerfile
	# push: ${{ github.event_name != 'pull_request' }}
	# # tags: ${{ steps.meta.outputs.tags }}
	# tags: \|
	# ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:prod-${{ github.sha }}
	# ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:prod-latest
	# labels: ${{ steps.meta.outputs.labels }}
	# cache-from: type=gha
	# cache-to: type=gha,mode=max

	# # Sign the resulting Docker image digest except on PRs.
	# # This will only write to the public Rekor transparency log when the Docker
	# # repository is public to avoid leaking data. If you would like to publish
	# # transparency data even for private images, pass --force to cosign below.
	# # https://github.com/sigstore/cosign
	# - name: Sign the published Docker image
	# if: ${{ github.event_name != 'pull_request' }}
	# env:
	# # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
	# TAGS: ${{ steps.meta.outputs.tags }}
	# DIGEST: ${{ steps.build-and-push.outputs.digest }}
	# # This step uses the identity token to provision an ephemeral certificate
	# # against the sigstore community Fulcio instance.
	# run: echo "${TAGS}" \| xargs -I {} cosign sign --yes {}@${DIGEST}
	# # run: \|
	# # for tag in $TAGS; do
	# # cosign sign --yes $tag@$DIGEST
	# # done


	# build-to-dev:
	# needs: sonarcloud
	# runs-on: ubuntu-latest
	# permissions:
	# contents: read
	# packages: write
	# # This is used to complete the identity challenge
	# # with sigstore/fulcio when running outside of PRs.
	# id-token: write

	# steps:
	# - name: Checkout repository
	# uses: actions/checkout@v4

	# # Install the cosign tool except on PR
	# # https://github.com/sigstore/cosign-installer
	# - name: Install cosign
	# if: github.event_name != 'pull_request'
	# uses: sigstore/cosign-installer@v3

	# # Set up BuildKit Docker container builder to be able to build
	# # multi-platform images and export cache
	# # https://github.com/docker/setup-buildx-action
	# - name: Set up Docker Buildx
	# uses: docker/setup-buildx-action@v3 # v3.0.0

	# # Login against a Docker registry except on PR
	# # https://github.com/docker/login-action
	# - name: Log into registry ${{ env.REGISTRY }}
	# if: github.event_name != 'pull_request'
	# uses: docker/login-action@v3 # v3.0.0
	# with:
	# registry: ${{ env.REGISTRY }}
	# username: ${{ github.actor }}
	# password: ${{ secrets.GITHUB_TOKEN }}

	# # Extract metadata (tags, labels) for Docker
	# # https://github.com/docker/metadata-action
	# - name: Extract Docker metadata
	# id: meta
	# uses: docker/metadata-action@v5
	# with:
	# images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

	# # Build and push Docker image with Buildx (don't push on PR)
	# # https://github.com/docker/build-push-action
	# - name: Build and push Docker image
	# id: build-and-push
	# uses: docker/build-push-action@v5 # v5.0.0
	# with:
	# context: .
	# file: docker/dockerfileGHA.dev/Dockerfile
	# push: ${{ github.event_name != 'pull_request' }}
	# # tags: ${{ steps.meta.outputs.tags }}
	# tags: \|
	# ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:dev-${{ github.sha }}
	# ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:dev-latest
	# labels: ${{ steps.meta.outputs.labels }}
	# cache-from: type=gha
	# cache-to: type=gha,mode=max

	# # Sign the resulting Docker image digest except on PRs.
	# # This will only write to the public Rekor transparency log when the Docker
	# # repository is public to avoid leaking data. If you would like to publish
	# # transparency data even for private images, pass --force to cosign below.
	# # https://github.com/sigstore/cosign
	# - name: Sign the published Docker image
	# if: ${{ github.event_name != 'pull_request' }}
	# env:
	# # https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
	# TAGS: ${{ steps.meta.outputs.tags }}
	# DIGEST: ${{ steps.build-and-push.outputs.digest }}
	# # This step uses the identity token to provision an ephemeral certificate
	# # against the sigstore community Fulcio instance.
	# run: echo "${TAGS}" \| xargs -I {} cosign sign --yes {}@${DIGEST}
	# # run: \|
	# # for tag in $TAGS; do
	# # cosign sign --yes $tag@$DIGEST
	# # done


	build-to-test:
	# needs: sonarcloud
	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write
	# This is used to complete the identity challenge
	# with sigstore/fulcio when running outside of PRs.
	id-token: write

	steps:
	- name: Checkout repository
	uses: actions/checkout@v4

	# Install the cosign tool except on PR
	# https://github.com/sigstore/cosign-installer
	- name: Install cosign
	if: github.event_name != 'pull_request'
	uses: sigstore/cosign-installer@v3

	# Set up BuildKit Docker container builder to be able to build
	# multi-platform images and export cache
	# https://github.com/docker/setup-buildx-action
	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3 # v3.0.0

	# Login against a Docker registry except on PR
	# https://github.com/docker/login-action
	- name: Log into registry ${{ env.REGISTRY }}
	if: github.event_name != 'pull_request'
	uses: docker/login-action@v3 # v3.0.0
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	# Extract metadata (tags, labels) for Docker
	# https://github.com/docker/metadata-action
	- name: Extract Docker metadata
	id: meta
	uses: docker/metadata-action@v5
	with:
	images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

	# Build and push Docker image with Buildx (don't push on PR)
	# https://github.com/docker/build-push-action
	- name: Build and push Docker image
	id: build-and-push
	uses: docker/build-push-action@v5 # v5.0.0
	with:
	context: .
	file: docker/dockerfileGHA.test.dev/Dockerfile
	push: ${{ github.event_name != 'pull_request' }}
	# tags: ${{ steps.meta.outputs.tags }}
	tags: \|
	${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:test-${{ github.sha }}
	${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:test-latest
	labels: ${{ steps.meta.outputs.labels }}
	cache-from: type=gha
	cache-to: type=gha,mode=max

	# Sign the resulting Docker image digest except on PRs.
	# This will only write to the public Rekor transparency log when the Docker
	# repository is public to avoid leaking data. If you would like to publish
	# transparency data even for private images, pass --force to cosign below.
	# https://github.com/sigstore/cosign
	- name: Sign the published Docker image
	if: ${{ github.event_name != 'pull_request' }}
	env:
	# https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
	TAGS: ${{ steps.meta.outputs.tags }}
	DIGEST: ${{ steps.build-and-push.outputs.digest }}
	# This step uses the identity token to provision an ephemeral certificate
	# against the sigstore community Fulcio instance.
	run: echo "${TAGS}" \| xargs -I {} cosign sign --yes {}@${DIGEST}
	# run: \|
	# for tag in $TAGS; do
	# cosign sign --yes $tag@$DIGEST
	# done

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

502 repair the in validation and refused upload modification #475

Workflow file

502 repair the in validation and refused upload modification #475

Jobs

Run details

Workflow file for this run