Update Docker #14085
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # updatebot | |
| # | |
| # This runs every hour to check if upstream repos have had a new release | |
| # | |
| name: Update Docker | |
| on: | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - scripts/updateDockerImages.sh | |
| - .github/workflows/ansible.yml | |
| - .github/workflows/catprinter.yml | |
| - .github/workflows/dkimpy.yml | |
| - .github/workflows/docker-autocompose.yml | |
| - .github/workflows/sslyze.yml | |
| - .github/workflows/visidata.yml | |
| - .github/workflows/update-docker.yml | |
| workflow_dispatch: | |
| schedule: | |
| - cron: "0 * * * *" | |
| env: | |
| DOCKER_CLI_EXPERIMENTAL: enabled | |
| REPOSITORY: ${{ github.actor }}/${{ github.workflow }} | |
| concurrency: | |
| group: ${{ github.workflow }} | |
| cancel-in-progress: true | |
| permissions: read-all | |
| jobs: | |
| update-docker: | |
| runs-on: ubuntu-22.04 | |
| steps: | |
| # checkout with a PAT configured with workflow access to allow the workflow to check changes back in | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@1b05615854632b887b69ae1be8cbefe72d3ae423 # v1 | |
| with: | |
| egress-policy: block | |
| disable-telemetry: true | |
| allowed-endpoints: | |
| aerodent.canonical.com:443 | |
| api.github.com:443 | |
| azure.archive.ubuntu.com:80 | |
| files.pythonhosted.org:443 | |
| github.com:443 | |
| pypi.org:443 | |
| security.ubuntu.com:443 | |
| - name: Source checkout | |
| uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v2.4.0 | |
| with: | |
| token: ${{ secrets.UPDATE_SECRET }} | |
| fetch-depth: 1 | |
| # - name: Add pipenv | |
| # run: | | |
| # DEBIAN_FRONTEND=noninteractive sudo apt-get install -y --no-install-recommends pipenv python3.9 | |
| - name: Update dependencies | |
| run: | | |
| PAT="${{ github.actor }}/${{ secrets.UPDATE_SECRET }}" scripts/updateDockerImages.sh |