fix(docker-build-images)!: restrict build-secret GitHub App tokens

f567c91

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Pull Request - Semantic Lint on: pull_request 1

main / ☑️ Validate PR title

Internal - Pull request - Continuous Integration on: pull_request 180

ci / linter / 🧹 Lint Code Base

ci / linter / 🛡️ CodeQL Analysis (actions)

ci / linter / prepare-actions-linting

ci / linter / 📌 Check GitHub Actions Pinning

ci / test-action-docker-build-image / Test for "docker/build-image" action

ci / test-action-docker-build-image / Test for "docker/build-image" action with given tag

ci / test-action-docker-build-image / Test for "docker/build-image" action with BuildKit daemon config

ci / test-action-docker-build-image / Test for "docker/build-image" action without cache

ci / test-action-docker-create-images-manifests / Arrange - Build original tag / prepare-variables

ci / test-action-docker-create-images-manifests / Arrange - Build original tag / Build image test-create-manifests-clone-tag for linux/amd64

ci / test-action-docker-create-images-manifests / Arrange - Build original tag / Publish images manifests

ci / test-action-docker-create-images-manifests / Arrange - Build original tag / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-create-manifests-clone-tag:1.0.0-rc.0@sha256:54761a00fc2518a5b4b358c1a73a7ce540d27fe0efb53d256b6b5d1b9fb316b2)

ci / test-action-docker-create-images-manifests / Act/Assert - Clone 1.0.0-rc.0 to 1.0.0

ci / test-action-docker-setup / Test for "docker/setup" action

ci / test-action-docker-prune-pull-requests-image-tags / Arrange - Prepare variables

ci / test-action-docker-prune-pull-requests-image-tags / Arrange - Build images / prepare-variables

ci / test-action-docker-prune-pull-requests-image-tags / Arrange - Build images / Build image test-prune-1979 for linux/amd64

ci / test-action-docker-prune-pull-requests-image-tags / Arrange - Build images / Build image test-prune-1979 for linux/arm64

ci / test-action-docker-prune-pull-requests-image-tags / Arrange - Build images / Publish images manifests

ci / test-action-docker-prune-pull-requests-image-tags / Arrange - Build images / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-prune-1979:pr-914-953d1c7@sha256:cfad4bc861e2629e8e619f3399605b9b570d7e399f264cf25cff5ddd14359e3e)

ci / test-action-docker-prune-pull-requests-image-tags / Arrange - Verify built images

ci / test-action-docker-prune-pull-requests-image-tags / Act - Prune pull requests image tags

ci / test-action-docker-prune-pull-requests-image-tags / Assert - Verify deleted image tags

ci / test-action-docker-prune-pull-requests-image-tags / cleanup

ci / test-action-get-image-metadata / Test for "docker/get-image-metadata" action

ci / test-action-get-image-metadata / Test for "docker/get-image-metadata" action with given tag

ci / test-action-action-get-image-name / Test for "docker/get-image-name" action

ci / test-action-action-get-image-name / Test for "docker/get-image-name" action with given repository

ci / test-action-helm-parse-chart-uri / Test for "helm/parse-chart-uri" action

ci / test-action-helm-update-chart-values / Test for "helm/update-chart-values" action with simple chart

ci / test-action-helm-update-chart-values / Test for "helm/update-chart-values" action with umbrella chart

ci / test-action-helm-release-chart / Test for "helm/release-chart" action with simple chart (application, [ { "path": ".image.regist...

ci / test-action-helm-release-chart / Test for "helm/release-chart" action with simple chart (umbrella-application, [ { "file": "char...

ci / test-action-helm-test-chart / build-test-images / prepare-variables

ci / test-action-helm-test-chart / build-test-images / Build image application-test for linux/amd64

ci / test-action-helm-test-chart / build-test-images / Publish images manifests

ci / test-action-helm-test-chart / build-test-images / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/application-test:0.1.0@sha256:82b96be2c5749d7e4144588378da637818738765aecbdda14a714f26bcc18bd9)

ci / test-action-helm-test-chart / Test for "helm/test-chart" action

ci / Test docker build images - Building / Arrange - Build with args, secrets / prepare-variables

ci / Test docker build images - Building / Arrange - Build with args, secrets / Build image test-build-args-secrets for linux/amd64

ci / Test docker build images - Building / Arrange - Build with args, secrets / Publish images manifests

ci / Test docker build images - Building / Arrange - Build with args, secrets / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-build-args-secrets:pr-914-953d1c7@sha256:99053a9a0dc6d788edce457b9c017f667d112975df797373a1a037f77489fc12)

ci / Test docker build images - Building / Assert - Build with args, secrets

ci / Test docker build images - Caching / Arrange

ci / Test docker build images - Caching / Act - Build images - registry cache / prepare-variables

ci / Test docker build images - Caching / Act - Build images - registry cache / Build image test-caching-mono-arch-registry for linux/amd64

ci / Test docker build images - Caching / Act - Build images - registry cache / Build image test-caching-multi-arch-registry for linux/amd64

ci / Test docker build images - Caching / Act - Build images - registry cache / Build image test-caching-multi-arch-registry for linux/arm64

ci / Test docker build images - Caching / Act - Build images - registry cache / Publish images manifests

ci / Test docker build images - Caching / Act - Build images - registry cache / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-caching-multi-arch-registry:pr-914-953d1c7@sha256:74a2f69c075e1eb2f7a7bca227b447bf71f384ee7823edd62e26fb328cc70b93)

ci / Test docker build images - Caching / Act - Build images - registry cache / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-caching-mono-arch-registry:pr-914-953d1c7@sha256:43386268a83bbdd7c88edb72f5bff515ddef84d3d802eba85fd9517488aea79c)

ci / Test docker build images - Caching / Act - Build images - gha cache / prepare-variables

ci / Test docker build images - Caching / Act - Build images - gha cache / Build image test-caching-mono-arch-gha for linux/amd64

ci / Test docker build images - Caching / Act - Build images - gha cache / Build image test-caching-multi-arch-gha for linux/amd64

ci / Test docker build images - Caching / Act - Build images - gha cache / Build image test-caching-multi-arch-gha for linux/arm64

ci / Test docker build images - Caching / Act - Build images - gha cache / Publish images manifests

ci / Test docker build images - Caching / Act - Build images - gha cache / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-caching-multi-arch-gha:pr-914-953d1c7@sha256:47b38ead6ac8c29557c7f28b6506e65296aedfdd2c1d6db3fad96814e099ea36)

ci / Test docker build images - Caching / Act - Build images - gha cache / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-caching-mono-arch-gha:pr-914-953d1c7@sha256:170be425f8d0a827420721d3070e063528dd95431773d612f1427d54ea89e88f)

ci / Test docker build images - Caching / Assert - Cached images (mono-arch - registry)

ci / Test docker build images - Caching / Assert - Cached images (multi-arch - registry)

ci / Test docker build images - Caching / Assert - Cached images (mono-arch - gha)

ci / Test docker build images - Caching / Assert - Cached images (multi-arch - gha)

ci / Test docker build images - Multi registry inputs / Act - Build images with structured registry inputs / prepare-variables

ci / Test docker build images - Multi registry inputs / Act - Build images with structured registry inputs / Build image test-multi-registry-inputs for linux/amd64

ci / Test docker build images - Multi registry inputs / Act - Build images with structured registry inputs / Publish images manifests

ci / Test docker build images - Multi registry inputs / Act - Build images with structured registry inputs / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-multi-registry-inputs:pr-914-953d1c7@sha256:50c301a59e44e02768f1b9f342979cc164dc60f02a5ac18db175db5063f42821)

ci / Test docker build images - Multi registry inputs / Assert - Build images with structured registry inputs

ci / Test docker build images - Platforms and Signing / Arrange

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - signed - not-attested) / prepare-variables

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - signed - not-attested) / Build image test-pr-914-1979-mono-arch-signed-not-attested for linux/amd64

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - signed - not-attested) / Publish images manifests

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - signed - not-attested) / Attest image (${{ matrix.image }})

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - signed - attested) / prepare-variables

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - signed - attested) / Build image test-pr-914-1979-mono-arch-signed-attested for linux/amd64

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - signed - attested) / Publish images manifests

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - signed - attested) / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-pr-914-1979-mono-arch-signed-attested:0.1.0@sha256:dd18462514ebd1fc089d4492882e9b9af9a7c442f1aa3ef9e0e5ae3f5aaea90b)

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - signed - not-attested) / prepare-variables

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - signed - not-attested) / Build image test-pr-914-1979-multi-arch-signed-not-attested for linux/amd64

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - signed - not-attested) / Build image test-pr-914-1979-multi-arch-signed-not-attested for linux/arm64

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - signed - not-attested) / Publish images manifests

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - signed - not-attested) / Attest image (${{ matrix.image }})

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - signed - attested) / prepare-variables

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - signed - attested) / Build image test-pr-914-1979-multi-arch-signed-attested for linux/amd64

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - signed - attested) / Build image test-pr-914-1979-multi-arch-signed-attested for linux/arm64

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - signed - attested) / Publish images manifests

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - signed - attested) / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-pr-914-1979-multi-arch-signed-attested:0.1.0@sha256:5e11fa9c91357f5febfe47af7b9dbdd4bdce130a3ad57a75e01c428d9d0a2adf)

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - unsigned - not-attested) / prepare-variables

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - unsigned - not-attested) / Build image test-pr-914-1979-mono-arch-unsigned-not-attested for linux/amd64

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - unsigned - not-attested) / Publish images manifests

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - unsigned - not-attested) / Attest image (${{ matrix.image }})

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - unsigned - attested) / prepare-variables

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - unsigned - attested) / Build image test-pr-914-1979-mono-arch-unsigned-attested for linux/amd64

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - unsigned - attested) / Publish images manifests

ci / Test docker build images - Platforms and Signing / Act - Build images (mono-arch - unsigned - attested) / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-pr-914-1979-mono-arch-unsigned-attested:0.1.0@sha256:1ff373d8a0875b52b64e71f3624ee2e5497a05dd6d1d872600eb72c126a7ceee)

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - unsigned - not-attested) / prepare-variables

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - unsigned - not-attested) / Build image test-pr-914-1979-multi-arch-unsigned-not-attested for linux/amd64

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - unsigned - not-attested) / Build image test-pr-914-1979-multi-arch-unsigned-not-attested for linux/arm64

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - unsigned - not-attested) / Publish images manifests

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - unsigned - not-attested) / Attest image (${{ matrix.image }})

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - unsigned - attested) / prepare-variables

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - unsigned - attested) / Build image test-pr-914-1979-multi-arch-unsigned-attested for linux/amd64

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - unsigned - attested) / Build image test-pr-914-1979-multi-arch-unsigned-attested for linux/arm64

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - unsigned - attested) / Publish images manifests

ci / Test docker build images - Platforms and Signing / Act - Build images (multi-arch - unsigned - attested) / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-pr-914-1979-multi-arch-unsigned-attested:0.1.0@sha256:910410d3e4aac1c97ac633e61bb5f0f6a29703497dcc9c76df9dccf26993ef1a)

ci / Test docker build images - Platforms and Signing / Assert - Published images (mono-arch - signed - not-attested)

ci / Test docker build images - Platforms and Signing / Assert - Published images (mono-arch - signed - attested)

ci / Test docker build images - Platforms and Signing / Assert - Published images (multi-arch - signed - not-attested)

ci / Test docker build images - Platforms and Signing / Assert - Published images (multi-arch - signed - attested)

ci / Test docker build images - Platforms and Signing / Assert - Published images (mono-arch - unsigned - not-attested)

ci / Test docker build images - Platforms and Signing / Assert - Published images (mono-arch - unsigned - attested)

ci / Test docker build images - Platforms and Signing / Assert - Published images (multi-arch - unsigned - not-attested)

ci / Test docker build images - Platforms and Signing / Assert - Published images (multi-arch - unsigned - attested)

ci / Test docker build images - Platforms and Signing / Assert - Images signature (mono-arch - signed - not-attested)

ci / Test docker build images - Platforms and Signing / Assert - Images signature (mono-arch - signed - attested)

ci / Test docker build images - Platforms and Signing / Assert - Images signature (multi-arch - signed - not-attested)

ci / Test docker build images - Platforms and Signing / Assert - Images signature (multi-arch - signed - attested)

ci / Test docker build images - Platforms and Signing / Assert - Images signature (mono-arch - unsigned - not-attested)

ci / Test docker build images - Platforms and Signing / Assert - Images signature (mono-arch - unsigned - attested)

ci / Test docker build images - Platforms and Signing / Assert - Images signature (multi-arch - unsigned - not-attested)

ci / Test docker build images - Platforms and Signing / Assert - Images signature (multi-arch - unsigned - attested)

ci / Test docker build images - Platforms and Signing / Cleanup ephemeral test packages (mono-arch - signed - not-attested, test-pr-914-1979-mono-arch-si...

ci / Test docker build images - Platforms and Signing / Cleanup ephemeral test packages (mono-arch - signed - attested, test-pr-914-1979-mono-arch-signed...

ci / Test docker build images - Platforms and Signing / Cleanup ephemeral test packages (multi-arch - signed - not-attested, test-pr-914-1979-multi-arch-...

ci / Test docker build images - Platforms and Signing / Cleanup ephemeral test packages (multi-arch - signed - attested, test-pr-914-1979-multi-arch-sign...

ci / Test docker build images - Platforms and Signing / Cleanup ephemeral test packages (mono-arch - unsigned - not-attested, test-pr-914-1979-mono-arch-...

ci / Test docker build images - Platforms and Signing / Cleanup ephemeral test packages (mono-arch - unsigned - attested, test-pr-914-1979-mono-arch-unsi...

ci / Test docker build images - Platforms and Signing / Cleanup ephemeral test packages (multi-arch - unsigned - not-attested, test-pr-914-1979-multi-arc...

ci / Test docker build images - Platforms and Signing / Cleanup ephemeral test packages (multi-arch - unsigned - attested, test-pr-914-1979-multi-arch-un...

ci / Test docker build images - Attestation / Arrange

ci / Test docker build images - Attestation / Act - Build images (mono-arch - attested) / prepare-variables

ci / Test docker build images - Attestation / Act - Build images (mono-arch - attested) / Build image test-pr-914-1979-mono-arch-attested for linux/amd64

ci / Test docker build images - Attestation / Act - Build images (mono-arch - attested) / Publish images manifests

ci / Test docker build images - Attestation / Act - Build images (mono-arch - attested) / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-pr-914-1979-mono-arch-attested:0.1.0@sha256:6a7f8c87bd2389ca49aa67d9b7976acbf97ca4a60a78ad442a6c44c0ab5729a8)

ci / Test docker build images - Attestation / Act - Build images (multi-arch - attested) / prepare-variables

ci / Test docker build images - Attestation / Act - Build images (multi-arch - attested) / Build image test-pr-914-1979-multi-arch-attested for linux/amd64

ci / Test docker build images - Attestation / Act - Build images (multi-arch - attested) / Build image test-pr-914-1979-multi-arch-attested for linux/arm64

ci / Test docker build images - Attestation / Act - Build images (multi-arch - attested) / Publish images manifests

ci / Test docker build images - Attestation / Act - Build images (multi-arch - attested) / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-pr-914-1979-multi-arch-attested:0.1.0@sha256:723f69e67016be97c639aaa989814e51ca3375a7b8e653852e79daa7a0fc3f6f)

ci / Test docker build images - Attestation / Act - Build images (multiple images - attested) / prepare-variables

ci / Test docker build images - Attestation / Act - Build images (multiple images - attested) / Build image test-pr-914-1979-multi-image-attested-a for linux/amd64

ci / Test docker build images - Attestation / Act - Build images (multiple images - attested) / Build image test-pr-914-1979-multi-image-attested-b for linux/amd64

ci / Test docker build images - Attestation / Act - Build images (multiple images - attested) / Publish images manifests

ci / Test docker build images - Attestation / Act - Build images (multiple images - attested) / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-pr-914-1979-multi-image-attested-b:0.1.0@sha256:6f057cc92d139c40f60c8998e552c4aa400360ba80ef9e830fac27b79466f6f0)

ci / Test docker build images - Attestation / Act - Build images (multiple images - attested) / Attest image (ghcr.io/hoverkraft-tech/ci-github-container/test-pr-914-1979-multi-image-attested-a:0.1.0@sha256:fe20ce3aa686bd0bfa5d6e73157ee489757b0134333d2176959fe2e59e3404cc)

ci / Test docker build images - Attestation / Act - Build images (mono-arch - not attested) / prepare-variables

ci / Test docker build images - Attestation / Act - Build images (mono-arch - not attested) / Build image test-pr-914-1979-mono-arch-not-attested for linux/amd64

ci / Test docker build images - Attestation / Act - Build images (mono-arch - not attested) / Publish images manifests

ci / Test docker build images - Attestation / Act - Build images (mono-arch - not attested) / Attest image (${{ matrix.image }})

ci / Test docker build images - Attestation / Assert - Images attestation (mono-arch - attested)

ci / Test docker build images - Attestation / Assert - Images attestation (multi-arch - attested)

ci / Test docker build images - Attestation / Assert - Images attestation (multiple images - attested)

ci / Test docker build images - Attestation / Assert - Images attestation (mono-arch - not attested)

ci / Test docker build images - Attestation / Cleanup ephemeral test packages (mono-arch - attested, true, [{"name":"test-pr-914-1979-mono-arch...

ci / Test docker build images - Attestation / Cleanup ephemeral test packages (multi-arch - attested, true, [{"name":"test-pr-914-1979-multi-ar...

ci / Test docker build images - Attestation / Cleanup ephemeral test packages (multiple images - attested, true, [{"name":"test-pr-914-1979-mul...

ci / Test docker build images - Attestation / Cleanup ephemeral test packages (mono-arch - not attested, false, [{"name":"test-pr-914-1979-mono...

Code scanning results

CodeQL

fix(docker-build-images)!: restrict build-secret GitHub App tokens

Uh oh!

Select a check to view from the sidebar