mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-07-13 20:27:41 +00:00
926a633cbd
In 7afdfc7388 we
just disabled the undocumented-permissions zizmor warning,
but now with AI we can roll this fix more easily, so remove
the disabling of the rule and add the comments
Generated-By: IBM Bob
Signed-off-by: stevenhorsman <steven@uk.ibm.com>
48 lines
1.4 KiB
YAML
48 lines
1.4 KiB
YAML
# Push gperf and busybox tarballs to the ORAS cache (ghcr.io) so that
|
|
# download-with-oras-cache.sh can pull them instead of hitting upstream.
|
|
# Runs when versions.yaml changes on main (e.g. after a PR merge) or manually.
|
|
name: CI | Push ORAS tarball cache
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
paths:
|
|
- 'versions.yaml'
|
|
workflow_dispatch:
|
|
|
|
permissions: {}
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
push-oras-cache:
|
|
name: push-oras-cache
|
|
runs-on: ubuntu-22.04
|
|
permissions:
|
|
contents: read
|
|
packages: write # needed to push the ORAS tarball cache to ghcr.io
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
fetch-depth: 0
|
|
persist-credentials: false
|
|
|
|
- name: Install yq
|
|
run: ./ci/install_yq.sh
|
|
|
|
- name: Install ORAS
|
|
uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4
|
|
with:
|
|
version: "1.2.0"
|
|
|
|
- name: Populate ORAS tarball cache
|
|
run: ./tools/packaging/scripts/populate-oras-tarball-cache.sh all
|
|
env:
|
|
ARTEFACT_REGISTRY: ghcr.io
|
|
ARTEFACT_REPOSITORY: kata-containers
|
|
ARTEFACT_REGISTRY_USERNAME: ${{ github.actor }}
|
|
ARTEFACT_REGISTRY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
|