diff --git a/.github/workflows/audit.yml b/.github/workflows/audit.yml index 3029696..503094d 100644 --- a/.github/workflows/audit.yml +++ b/.github/workflows/audit.yml @@ -14,19 +14,19 @@ jobs: strategy: fail-fast: false matrix: - DOCKER_TARGET_PLATFORM: [ - # linux/arm, # Disabled whilst waiting for next release of trivy with published arm artefacts - linux/arm64, - linux/amd64 - ] - runs-on: ubuntu-latest + os: [ ubuntu-latest, ubuntu-24.04-arm ] + runs-on: ${{ matrix.os }} env: - DOCKER_TARGET_PLATFORM: ${{ matrix.DOCKER_TARGET_PLATFORM }} TAG: latest steps: - uses: actions/checkout@v4 - - name: Prepare Docker multi-arch builder for ${{ matrix.DOCKER_TARGET_PLATFORM }} - if: ${{ matrix.DOCKER_TARGET_PLATFORM }} == 'linux/arm' || 'linux/arm64' - run: ./script/release-workflow/docker-prepare.sh - - name: Audit Docker image for ${{ matrix.DOCKER_TARGET_PLATFORM }} + - name: Audit Docker image for amd64 + if: ${{ matrix.os == 'ubuntu-latest' }} run: ./script/release-workflow/audit.sh + env: + DOCKER_TARGET_PLATFORM: linux/amd64 + - name: Audit Docker image for arm64 + if: ${{ matrix.os == 'ubuntu-24.04-arm' }} + run: ./script/release-workflow/audit.sh + env: + DOCKER_TARGET_PLATFORM: linux/arm64 diff --git a/Dockerfile b/Dockerfile index 4675fd4..b44b1fd 100644 --- a/Dockerfile +++ b/Dockerfile @@ -11,7 +11,7 @@ ADD docker/pact /usr/local/bin/pact RUN apk update \ && apk add ruby=3.3.6-r0 \ ruby-io-console=3.3.6-r0 \ - ca-certificates=20240705-r0 \ + ca-certificates=20241121-r1 \ libressl \ less \ git \