diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index c917fedd..96b5b6fd 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -2,6 +2,28 @@ name: Docker build on: pull_request: branches: [master] + paths-ignore: + - .devcontainer + - .github/ISSUE_TEMPLATE + - .github/workflows/buildx-release.yml + - .github/workflows/buildx-branch.yml + - .github/workflows/buildx-latest.yml + - .github/workflows/dockerhub-description.yml + - .github/workflows/labels.yml + - .github/workflows/misspell.yml + - .github/CODEOWNERS + - .github/CONTRIBUTING.md + - .github/FUNDING.yml + - .github/labels.yml + - .vscode + - cmd/ovpnparser + - cmd/resolver + - doc + - .gitignore + - docker-compose.yml + - LICENSE + - README.md + - title.svg jobs: build: runs-on: ubuntu-latest diff --git a/.github/workflows/buildx-branch.yml b/.github/workflows/buildx-branch.yml index fe0033cf..863cc608 100644 --- a/.github/workflows/buildx-branch.yml +++ b/.github/workflows/buildx-branch.yml @@ -6,13 +6,22 @@ on: - '*/*' - '!master' paths-ignore: + - .devcontainer + - .github/ISSUE_TEMPLATE + - .github/workflows/build.yml - .github/workflows/buildx-release.yml + - .github/workflows/buildx-latest.yml - .github/workflows/dockerhub-description.yml - - .github/workflows/greetings.yml - .github/workflows/labels.yml - .github/workflows/misspell.yml - - .github/workflows/security.yml - - .dockerignore + - .github/CODEOWNERS + - .github/CONTRIBUTING.md + - .github/FUNDING.yml + - .github/labels.yml + - .vscode + - cmd/ovpnparser + - cmd/resolver + - doc - .gitignore - docker-compose.yml - LICENSE diff --git a/.github/workflows/buildx-latest.yml b/.github/workflows/buildx-latest.yml index c3595d30..7ae28cbf 100644 --- a/.github/workflows/buildx-latest.yml +++ b/.github/workflows/buildx-latest.yml @@ -3,13 +3,22 @@ on: push: branches: [master] paths-ignore: + - .devcontainer + - .github/ISSUE_TEMPLATE + - .github/workflows/build.yml + - .github/workflows/buildx-branch.yml - .github/workflows/buildx-release.yml - .github/workflows/dockerhub-description.yml - - .github/workflows/greetings.yml - .github/workflows/labels.yml - .github/workflows/misspell.yml - - .github/workflows/security.yml - - .dockerignore + - .github/CODEOWNERS + - .github/CONTRIBUTING.md + - .github/FUNDING.yml + - .github/labels.yml + - .vscode + - cmd/ovpnparser + - cmd/resolver + - doc - .gitignore - docker-compose.yml - LICENSE diff --git a/.github/workflows/buildx-release.yml b/.github/workflows/buildx-release.yml index 22947c96..6239e4bf 100644 --- a/.github/workflows/buildx-release.yml +++ b/.github/workflows/buildx-release.yml @@ -3,13 +3,22 @@ on: release: types: [published] paths-ignore: + - .devcontainer + - .github/ISSUE_TEMPLATE + - .github/workflows/build.yml + - .github/workflows/buildx-branch.yml - .github/workflows/buildx-latest.yml - .github/workflows/dockerhub-description.yml - - .github/workflows/greetings.yml - .github/workflows/labels.yml - .github/workflows/misspell.yml - - .github/workflows/security.yml - - .dockerignore + - .github/CODEOWNERS + - .github/CONTRIBUTING.md + - .github/FUNDING.yml + - .github/labels.yml + - .vscode + - cmd/ovpnparser + - cmd/resolver + - doc - .gitignore - docker-compose.yml - LICENSE diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml deleted file mode 100644 index c6720834..00000000 --- a/.github/workflows/security.yml +++ /dev/null @@ -1,44 +0,0 @@ -name: Security scan of Docker image -on: - push: - branches: [master] - paths-ignore: - - .github/workflows/buildx-release.yml - - .github/workflows/dockerhub-description.yml - - .github/workflows/greetings.yml - - .github/workflows/labels.yml - - .github/workflows/misspell.yml - - .github/workflows/security.yml - - .dockerignore - - .gitignore - - docker-compose.yml - - LICENSE - - README.md - - title.svg - schedule: - - cron: '0 9 * * *' -jobs: - security-analysis: - runs-on: ubuntu-latest - steps: - - name: Checkout - uses: actions/checkout@v2 - - name: Check for scratch - id: scratchCheck - run: echo ::set-output name=scratch::$(cat Dockerfile | grep 'FROM scratch') - - name: Build image - if: steps.scratchCheck.outputs.scratch == '' - run: docker build -t image . - - name: Phonito - if: steps.scratchCheck.outputs.scratch == '' - uses: phonito/phonito-scanner-action@master - with: - image: image - fail-level: LOW - phonito-token: ${{ secrets.PHONITO_TOKEN }} - - name: Trivy - if: steps.scratchCheck.outputs.scratch == '' - uses: homoluctus/gitrivy@v1.0.0 - with: - token: ${{ secrets.GITHUB_TOKEN }} - image: image