ZeroDownTime/jenkins-podman
3
0
Fork 0
Code Issues 1 Pull Requests Packages Projects Releases Wiki Activity

feat: Add yq

Browse Source
This commit is contained in:
Stefan Reimer 2022-02-03 19:29:47 +01:00
parent 71d7acca49
commit ec564ae510
3 changed files with 7 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
Dockerfile
View File

@ -8,6 +8,7 @@ RUN echo "http://dl-cdn.alpinelinux.org/alpine/edge/testing" >> /etc/apk/reposit
&& apk --no-cache add \ && apk --no-cache add \
tini \ tini \
make \ make \
yq \
fuse-overlayfs \ fuse-overlayfs \
podman \ podman \
buildah \ buildah \

7
Jenkinsfile vendored
View File

@ -1,9 +1,10 @@
pipeline { pipeline {
agent { node { label 'podman-aws-trivy' } } agent { node { label 'podman-aws-trivy' } }
stages { stages {
stage('Prepare'){ stage('Prepare'){
// get tags
steps { steps {
// get tags
sh 'git fetch --tags ${GIT_URL} +refs/heads/${BRANCH_NAME}:refs/remotes/origin/${BRANCH_NAME}' sh 'git fetch --tags ${GIT_URL} +refs/heads/${BRANCH_NAME}:refs/remotes/origin/${BRANCH_NAME}'
} }
} }
@ -24,8 +25,8 @@ pipeline {
// Scan via trivy // Scan via trivy
stage('Scan'){ stage('Scan'){
environment { environment {
TRIVY_FORMAT = "template" TRIVY_FORMAT = "template"
TRIVY_OUTPUT = "reports/trivy.html" TRIVY_OUTPUT = "reports/trivy.html"
} }
steps { steps {
sh 'mkdir -p reports' sh 'mkdir -p reports'

2
Makefile
View File

@ -24,6 +24,8 @@ push:
podman tag $(REPOSITORY):latest $(REGISTRY)/$(REPOSITORY):$(TAG) $(REGISTRY)/$(REPOSITORY):latest podman tag $(REPOSITORY):latest $(REGISTRY)/$(REPOSITORY):$(TAG) $(REGISTRY)/$(REPOSITORY):latest
podman push $(REGISTRY)/$(REPOSITORY):$(TAG) podman push $(REGISTRY)/$(REPOSITORY):$(TAG)
podman push $(REGISTRY)/$(REPOSITORY):latest podman push $(REGISTRY)/$(REPOSITORY):latest
# Delete all untagged images
# aws ecr-public batch-delete-image --repository-name $(REPOSITORY) --region $(REGION) --image-ids $$(for image in $$(aws ecr-public describe-images --repository-name $(REPOSITORY) --region $(REGION) --output json | jq -r '.imageDetails[] | select(.imageTags | not ).imageDigest'); do echo -n "imageDigest=$$image "; done)
scan: scan:
trivy $(TRIVY_OPTS) $(REPOSITORY):$(TAG) trivy $(TRIVY_OPTS) $(REPOSITORY):$(TAG)