Skip to content

Commit 8661ac1

Browse files
authored
Add Image Scan to PR Build (#250)
*Description of changes:* - Adding `artifacts_build` step to `pr-build` workflow for JS images to get vulnerability scanning during PR builds. See the same for [Java](https://github.com/aws-observability/aws-otel-java-instrumentation/blob/main/.github/workflows/pr-build.yml#L145) and [Python](https://github.com/aws-observability/aws-otel-python-instrumentation/blob/main/.github/workflows/pr-build.yml#L23) - Delete duplicate `docker logout` step in artifact_build. Doesn't effect PR builds from forked repos: https://github.com/aws-observability/aws-otel-js-instrumentation/actions/runs/16950181911/job/48040937542?pr=251 *Testing* Successful run: https://github.com/aws-observability/aws-otel-js-instrumentation/actions/runs/16949767942 By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.
1 parent f88a360 commit 8661ac1

File tree

1 file changed

+9
-0
lines changed

1 file changed

+9
-0
lines changed

.github/workflows/pr-build.yml

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -38,6 +38,15 @@ jobs:
3838
run: npm ci
3939
- name: Compile all NPM projects
4040
run: npm run compile
41+
- name: Build Tarball and Image Files
42+
uses: ./.github/actions/artifacts_build
43+
with:
44+
image_uri_with_tag: pr-build/${{ matrix.node }}
45+
push_image: false
46+
load_image: true
47+
node_version: ${{ matrix.node }}
48+
package_name: aws-distro-opentelemetry-node-autoinstrumentation
49+
os: ubuntu-latest
4150
- name: Build Lambda Layer
4251
run: npm run build-lambda
4352
- name: Unit tests (Full)

0 commit comments

Comments
 (0)