fix: result/package.json & result/package-lock.json to reduce vulnera… #81
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build Worker | ||
| # template source: https://github.com/dockersamples/.github/blob/main/templates/call-docker-build.yaml | ||
| on: | ||
| # we want pull requests so we can build(test) but not push to image registry | ||
| push: | ||
| branches: | ||
| - 'main' | ||
| # only build when important files change | ||
| paths: | ||
| - 'worker/**' | ||
| - '.github/workflows/call-docker-build-worker.yaml' | ||
| pull_request: | ||
| branches: | ||
| - 'main' | ||
| # only build when important files change | ||
| paths: | ||
| - 'worker/**' | ||
| - '.github/workflows/call-docker-build-worker.yaml' | ||
| jobs: | ||
| call-docker-build: | ||
| name: Worker Call Docker Build | ||
| uses: ./.github/workflows/reusable-docker-build.yaml@main | ||
| permissions: | ||
| contents: read | ||
| packages: write # needed to push docker image to ghcr.io | ||
| pull-requests: write # needed to create and update comments in PRs | ||
| secrets: | ||
| # Only needed if with:dockerhub-enable is true below | ||
| dockerhub-username: ${{ secrets.DOCKERHUB_USERNAME }} | ||
| # Only needed if with:dockerhub-enable is true below | ||
| dockerhub-token: ${{ secrets.DOCKERHUB_TOKEN }} | ||
| with: | ||
| ### REQUIRED | ||
| ### ENABLE ONE OR BOTH REGISTRIES | ||
| ### tell docker where to push. | ||
| ### NOTE if Docker Hub is set to true, you must set secrets above and also add account/repo/tags below | ||
| dockerhub-enable: true | ||
| ghcr-enable: true | ||
| ### REQUIRED | ||
| ### A list of the account/repo names for docker build. List should match what's enabled above | ||
| ### defaults to: | ||
| image-names: | | ||
| ghcr.io/blackmoonfank/vote-app-worker | ||
| furqon/voteapp_worker | ||
| ### REQUIRED set rules for tagging images, based on special action syntax: | ||
| ### https://github.com/docker/metadata-action#tags-input | ||
| ### defaults to: | ||
| tag-rules: | | ||
| type=raw,value=latest,enable=${{ endsWith(github.ref, github.event.repository.default_branch) }} | ||
| type=ref,event=pr | ||
| ### path to where docker should copy files into image | ||
| ### defaults to root of repository (.) | ||
| context: worker | ||
| ### Dockerfile alternate name. Default is Dockerfile (relative to context path) | ||
| # file: Containerfile | ||
| ### build stage to target, defaults to empty, which builds to last stage in Dockerfile | ||
| # target: | ||
| ### platforms to build for, defaults to linux/amd64 | ||
| ### other options: linux/amd64,linux/arm64,linux/arm/v7 | ||
| # FIXME worker arm/v7 support doesn't build in .net core 3.1 with QEMU | ||
| # a fix would likely run the .net build on amd64 but with a target of arm/v7 | ||
| platforms: linux/amd64,linux/arm64,linux/arm/v7 | ||
| ### Create a PR comment with image tags and labels | ||
| ### defaults to false | ||
| # comment-enable: false | ||
