Skip to content

Prevent path traversal in module resolution (#1353) #130

Prevent path traversal in module resolution (#1353)

Prevent path traversal in module resolution (#1353) #130

Workflow file for this run

name: Stage
on:
push:
branches: [main]
jobs:
# deploy_server:
# name: Deploy main branch to next.esm.sh
# runs-on: ubuntu-latest
# environment: next.esm.sh
# steps:
# - name: Checkout
# uses: actions/checkout@v4
# - name: Setup Go
# uses: actions/setup-go@v5
# with:
# go-version: 1.26.x
# - name: Run Deploy Script
# run: ./scripts/deploy-ci.sh
# env:
# GOOS: ${{ secrets.DEPLOY_HOST_OS }}
# GOARCH: ${{ secrets.DEPLOY_HOST_ARCH }}
# DEPLOY_HOST: ${{ secrets.DEPLOY_HOST }}
# DEPLOY_SSH_PORT: ${{ secrets.DEPLOY_SSH_PORT }}
# DEPLOY_SSH_USER: ${{ secrets.DEPLOY_SSH_USER }}
# DEPLOY_SSH_PRIVATE_KEY: ${{ secrets.DEPLOY_SSH_PRIVATE_KEY }}
# SERVER_VERSION: ${{ github.sha }}
# RESET_ON_DEPLOY: yes
push_docker_image:
name: Push docker image to ghcr.io
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Login to GHCR
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Build and push
uses: docker/build-push-action@v6
with:
context: .
push: true
platforms: linux/amd64,linux/arm64
tags: ghcr.io/esm-dev/esm.sh:dev
build-args: SERVER_VERSION=main
env:
DOCKER_BUILD_RECORD_UPLOAD: false