Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/build-world.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ jobs:
fail-fast: false

container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:bff8933f9d36cd8b2abd059df2aa279a110852a8f9e26da5f0e6a398a7598102
image: ghcr.io/wolfi-dev/sdk:latest@sha256:21b9395fdd2e30a5a3f222cdb52e626280423eaac0238266886cb85140a3939f
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --security-opt seccomp=unconfined --security-opt apparmor:unconfined

Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/build.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,7 @@ jobs:
# permissions:

container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:bff8933f9d36cd8b2abd059df2aa279a110852a8f9e26da5f0e6a398a7598102
image: ghcr.io/wolfi-dev/sdk:latest@sha256:21b9395fdd2e30a5a3f222cdb52e626280423eaac0238266886cb85140a3939f
# TODO: Deprivilege
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --device /dev/fuse --security-opt seccomp=unconfined --security-opt apparmor:unconfined
Expand Down Expand Up @@ -104,7 +104,7 @@ jobs:

container:
# NOTE: This step only signs and uploads, so it doesn't need any privileges
image: ghcr.io/wolfi-dev/sdk:latest@sha256:bff8933f9d36cd8b2abd059df2aa279a110852a8f9e26da5f0e6a398a7598102
image: ghcr.io/wolfi-dev/sdk:latest@sha256:21b9395fdd2e30a5a3f222cdb52e626280423eaac0238266886cb85140a3939f

steps:
- uses: actions/checkout@v3
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/ci-build.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,7 @@ jobs:
run: |
# Copy wolfictl out of the wolfictl image and onto PATH
TMP=$(mktemp -d)
docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:bff8933f9d36cd8b2abd059df2aa279a110852a8f9e26da5f0e6a398a7598102 -c "cp /usr/bin/wolfictl /out"
docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:21b9395fdd2e30a5a3f222cdb52e626280423eaac0238266886cb85140a3939f -c "cp /usr/bin/wolfictl /out"
echo "$TMP" >> $GITHUB_PATH

# Assuming that we have a list of changed files such as `foo.yaml` and `bar.yaml`, this
Expand All @@ -51,7 +51,7 @@ jobs:
runs-on: ubuntu-16-core
needs: changes
container:
image: ghcr.io/wolfi-dev/sdk:latest@sha256:bff8933f9d36cd8b2abd059df2aa279a110852a8f9e26da5f0e6a398a7598102
image: ghcr.io/wolfi-dev/sdk:latest@sha256:21b9395fdd2e30a5a3f222cdb52e626280423eaac0238266886cb85140a3939f
options: |
--cap-add NET_ADMIN --cap-add SYS_ADMIN --security-opt seccomp=unconfined --security-opt apparmor:unconfined

Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/dag-push-production.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -156,7 +156,7 @@ jobs:
--cpu=30 --ram=100Gi \
--bucket=${BUCKET} \
--src-bucket=${SRC_BUCKET} \
--sdk-image ghcr.io/wolfi-dev/sdk:latest@sha256:bff8933f9d36cd8b2abd059df2aa279a110852a8f9e26da5f0e6a398a7598102 \
--sdk-image ghcr.io/wolfi-dev/sdk:latest@sha256:21b9395fdd2e30a5a3f222cdb52e626280423eaac0238266886cb85140a3939f \
--pending-timeout=20m \
--secret-key \
--arch=arm64
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/push-production.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,7 @@ jobs:
run: |
# Copy wolfictl out of the wolfictl image and onto PATH
TMP=$(mktemp -d)
docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:bff8933f9d36cd8b2abd059df2aa279a110852a8f9e26da5f0e6a398a7598102 -c "cp /usr/bin/wolfictl /out"
docker run --rm -i -v $TMP:/out --entrypoint /bin/sh ghcr.io/wolfi-dev/sdk:latest@sha256:21b9395fdd2e30a5a3f222cdb52e626280423eaac0238266886cb85140a3939f -c "cp /usr/bin/wolfictl /out"
echo "$TMP" >> $GITHUB_PATH

- name: 'Build Wolfi'
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/wolfictl-check-update.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,7 @@ jobs:
- name: Check
id: check
if: ${{ steps.files.outputs.all_changed_files != '' }}
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:4db845fa9cda54bc3427fa8419abc6334f123388ec32dcc6fd22917483af313b
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:bdb4532885085c1cc086f3cf100525231b49ea41609fb8555c5dc57ea6656b9a
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
with:
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/wolfictl-lint.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -19,13 +19,13 @@ jobs:
- uses: actions/checkout@v3
- name: Lint
id: lint
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:4db845fa9cda54bc3427fa8419abc6334f123388ec32dcc6fd22917483af313b
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:bdb4532885085c1cc086f3cf100525231b49ea41609fb8555c5dc57ea6656b9a
with:
entrypoint: wolfictl
args: lint --skip-rule no-makefile-entry-for-package
- name: Enforce YAML formatting
id: lint-yaml
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:4db845fa9cda54bc3427fa8419abc6334f123388ec32dcc6fd22917483af313b
uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:bdb4532885085c1cc086f3cf100525231b49ea41609fb8555c5dc57ea6656b9a
with:
entrypoint: wolfictl
args: lint yam
2 changes: 1 addition & 1 deletion .github/workflows/wolfictl-update-gh.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
steps:
- uses: actions/checkout@v3

- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:4db845fa9cda54bc3427fa8419abc6334f123388ec32dcc6fd22917483af313b
- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:bdb4532885085c1cc086f3cf100525231b49ea41609fb8555c5dc57ea6656b9a
with:
entrypoint: wolfictl
args: update https://github.com/${{github.repository}} --release-monitoring-query=false --github-labels request-version-update --github-labels "automated pr"
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/wolfictl-update-rm.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ jobs:
steps:
- uses: actions/checkout@v3

- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:4db845fa9cda54bc3427fa8419abc6334f123388ec32dcc6fd22917483af313b
- uses: docker://ghcr.io/wolfi-dev/wolfictl:latest@sha256:bdb4532885085c1cc086f3cf100525231b49ea41609fb8555c5dc57ea6656b9a
with:
entrypoint: wolfictl
args: update https://github.com/${{github.repository}} --github-release-query=false --github-labels request-version-update --github-labels "automated pr"
Expand Down