23
23
run : echo "JOB_START_TIME=$(date -u +"%d %B %A %Y %H:%M UTC")" >> $GITHUB_ENV
24
24
25
25
- name : Git config and create new tag
26
+ if : github.ref == 'refs/heads/main' # Run only on main branch
26
27
run : |
27
28
# Run bash script to get new tag
28
29
bash get_latest_version_create_tag.sh
@@ -46,31 +47,21 @@ jobs:
46
47
with :
47
48
push : true
48
49
platforms : linux/amd64,linux/arm64
49
- tags : ${{ secrets.DOCKERHUB_USERNAME }}/jenkins-core-image:${{ env.NEW_VERSION }}
50
+ tags : |
51
+ ${{ secrets.DOCKERHUB_USERNAME }}/jenkins-core-image:${{ env.NEW_VERSION }}
52
+ ${{ secrets.DOCKERHUB_USERNAME }}/jenkins-core-image:latest
50
53
build-args : |
51
54
"JENKINS_USER=${{ secrets.JENKINS_USER }}"
52
55
"JENKINS_PASS=${{ secrets.JENKINS_PASS }}"
53
56
"GITHUB_APP_KEY=${{ secrets.GH_APP_KEY }}"
54
- "GITHUB_APP_ID=${{ secrets.GH_APP_ID }}"
55
-
56
- - name : Build and Publish docker image with latest tag
57
- uses : docker/build-push-action@v5
58
- with :
59
- push : true
60
- platforms : linux/amd64,linux/arm64
61
- tags : ${{ secrets.DOCKERHUB_USERNAME }}/jenkins-core-image:latest
62
- build-args : |
63
- "JENKINS_USER=${{ secrets.JENKINS_USER }}"
64
- "JENKINS_PASS=${{ secrets.JENKINS_PASS }}"
65
- "GITHUB_APP_KEY=${{ secrets.GH_APP_KEY }}"
66
- "GITHUB_APP_ID=${{ secrets.GH_APP_ID }}"
57
+ "GITHUB_APP_ID=${{ secrets.GH_APP_ID }}"
67
58
68
59
- name : set up docker and scan docker image for vulnerabilities
69
60
uses : docker-practice/actions-setup-docker@master
70
61
- run : |
71
62
set -x
72
63
docker version
73
- docker run -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy image ${{ secrets.DOCKERHUB_USERNAME }}/jenkins-core-image:latest
64
+ docker run -v /var/run/docker.sock:/var/run/docker.sock aquasec/trivy image ${{ secrets.DOCKERHUB_USERNAME }}/jenkins-core-image:latest
74
65
75
66
- name : Set job end time
76
67
run : echo "JOB_END_TIME=$(date -u +"%d %B %A %Y %H:%M UTC")" >> $GITHUB_ENV
0 commit comments