fix(ci): remove local image build step for Trivy scanning
This commit is contained in:
@@ -70,17 +70,6 @@ jobs:
|
|||||||
username: ${{ gitea.actor }}
|
username: ${{ gitea.actor }}
|
||||||
password: ${{ secrets.REGISTRY_TOKEN }}
|
password: ${{ secrets.REGISTRY_TOKEN }}
|
||||||
|
|
||||||
# Build a single-arch image locally so Trivy can inspect it before the real push.
|
|
||||||
- name: Build local image for scanning
|
|
||||||
uses: docker/build-push-action@v5
|
|
||||||
with:
|
|
||||||
context: .
|
|
||||||
target: final
|
|
||||||
platforms: linux/amd64
|
|
||||||
load: true
|
|
||||||
tags: scan-target:${{ inputs.tag }}
|
|
||||||
cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ gitea.repository }}:buildcache
|
|
||||||
|
|
||||||
- name: Build and push
|
- name: Build and push
|
||||||
uses: docker/build-push-action@v5
|
uses: docker/build-push-action@v5
|
||||||
with:
|
with:
|
||||||
|
|||||||
Reference in New Issue
Block a user