@@ -70,12 +70,18 @@ jobs:
70
70
with :
71
71
egress-policy : audit
72
72
- uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
73
+ with :
74
+ persist-credentials : false
73
75
- name : Set Matrix
74
76
id : build-matrix
75
- run : echo "matrix=$(jq -c . < ${{ inputs.group_dir }}/.actions.json)" >> $GITHUB_OUTPUT
77
+ run : echo "matrix=$(jq -c . < ${INPUTS_GROUP_DIR}/.actions.json)" >> $GITHUB_OUTPUT
78
+ env :
79
+ INPUTS_GROUP_DIR : ${{ inputs.group_dir }}
76
80
- name : Print Inputs
77
81
if : ${{ inputs.env_overrides }}
78
- run : echo "Overrides - ${{ inputs.env_overrides }}" >> $GITHUB_STEP_SUMMARY
82
+ run : echo "Overrides - ${INPUTS_ENV_OVERRIDES}" >> $GITHUB_STEP_SUMMARY
83
+ env :
84
+ INPUTS_ENV_OVERRIDES : ${{ inputs.env_overrides }}
79
85
build-containers :
80
86
needs : [setup-build]
81
87
env : ${{ matrix }}
89
95
- uses : jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
90
96
- uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
91
97
if : ${{ !inputs.no_build }}
98
+ with :
99
+ persist-credentials : false
92
100
- uses : azure/docker-login@15c4aadf093404726ab2ff205b2cdd33fa6d054c # v2
93
101
with :
94
102
login-server : ${{ secrets.REGISTRY }}
@@ -103,7 +111,7 @@ jobs:
103
111
- name : Build Container Group
104
112
if : ${{ !inputs.no_build }}
105
113
id : build-group
106
- uses : intel/ai-containers/.github@main
114
+ uses : intel/ai-containers/.github@22527f085f2accb495bf4fed7475d683b4120927
107
115
with :
108
116
group_dir : ${{ inputs.group_dir }}
109
117
env_overrides : ${{ inputs.env_overrides || env.env_overrides || '' }}
@@ -130,7 +138,9 @@ jobs:
130
138
path : matrix
131
139
- name : Set Matrix
132
140
id : scan-matrix
133
- run : echo "matrix=$(cat matrix/*-${{ needs.build-containers.outputs.group }}/*.txt | jq -R '.' | jq -sc '. | unique')" >> $GITHUB_OUTPUT
141
+ run : echo "matrix=$(cat matrix/*-${NEEDS_BUILD_CONTAINERS_OUTPUTS_GROUP}/*.txt | jq -R '.' | jq -sc '. | unique')" >> $GITHUB_OUTPUT
142
+ env :
143
+ NEEDS_BUILD_CONTAINERS_OUTPUTS_GROUP : ${{ needs.build-containers.outputs.group }}
134
144
scan-containers :
135
145
needs : [setup-scan]
136
146
if : ${{ !inputs.no_build && github.event_name == 'pull_request' }}
@@ -146,6 +156,8 @@ jobs:
146
156
with :
147
157
egress-policy : audit
148
158
- uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
159
+ with :
160
+ persist-credentials : false
149
161
- uses : azure/docker-login@15c4aadf093404726ab2ff205b2cdd33fa6d054c # v2
150
162
with :
151
163
login-server : ${{ secrets.REGISTRY }}
@@ -196,9 +208,13 @@ jobs:
196
208
with :
197
209
egress-policy : audit
198
210
- uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
211
+ with :
212
+ persist-credentials : false
199
213
- name : Get Recipes
200
214
id : test-matrix
201
- run : echo "matrix=$(find ${{ inputs.group_dir }} -type f -name 'tests.yaml' -exec dirname {} \; | jq -R -s -c 'split("\n")[:-1]')" >> $GITHUB_OUTPUT
215
+ run : echo "matrix=$(find ${INPUTS_GROUP_DIR} -type f -name 'tests.yaml' -exec dirname {} \; | jq -R -s -c 'split("\n")[:-1]')" >> $GITHUB_OUTPUT
216
+ env :
217
+ INPUTS_GROUP_DIR : ${{ inputs.group_dir }}
202
218
test-containers :
203
219
needs : [setup-build, setup-test]
204
220
if : ${{ needs.setup-test.outputs.matrix != '[]' }}
@@ -213,6 +229,8 @@ jobs:
213
229
with :
214
230
egress-policy : audit
215
231
- uses : actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
232
+ with :
233
+ persist-credentials : false
216
234
- uses : azure/docker-login@15c4aadf093404726ab2ff205b2cdd33fa6d054c # v2
217
235
with :
218
236
login-server : ${{ secrets.REGISTRY }}
@@ -224,7 +242,7 @@ jobs:
224
242
# username: ${{ secrets.REGISTRY_USER }}
225
243
# password: ${{ secrets.REGISTRY_TOKEN }}
226
244
- name : Test Container Group
227
- uses : intel/ai-containers/test-runner@main
245
+ uses : intel/ai-containers/test-runner@22527f085f2accb495bf4fed7475d683b4120927
228
246
with :
229
247
cache_registry : ${{ secrets.CACHE_REGISTRY }}
230
248
recipe_dir : ${{ inputs.group_dir }}
0 commit comments