Always update the versioned image tag alongside :latest on container changes
CI / build-and-scan (push) Successful in 37s
CI / build-and-scan (push) Successful in 37s
This commit is contained in:
@@ -82,17 +82,12 @@ jobs:
|
||||
fi
|
||||
|
||||
IMAGE=git.djeex.fr/djeex/adguard-cidre
|
||||
VERSION=$(tr -d '[:space:]' < VERSION)
|
||||
echo "${{ secrets.REGISTRY_TOKEN }}" | docker login git.djeex.fr -u Djeex --password-stdin
|
||||
|
||||
# Retag the already-built, already-scanned image — never rebuild for publish,
|
||||
# so what ships is byte-for-byte what Trivy just scanned.
|
||||
docker tag adguard-cidre:ci "$IMAGE:latest"
|
||||
docker push "$IMAGE:latest"
|
||||
|
||||
if echo "$CHANGED" | grep -qE '^VERSION$'; then
|
||||
VERSION=$(tr -d '[:space:]' < VERSION)
|
||||
docker tag adguard-cidre:ci "$IMAGE:$VERSION"
|
||||
docker push "$IMAGE:latest"
|
||||
docker push "$IMAGE:$VERSION"
|
||||
else
|
||||
echo "VERSION unchanged, skipping versioned tag to avoid overwriting an existing release."
|
||||
fi
|
||||
Reference in New Issue
Block a user