Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
ARG BUILD_DIR=/build
ARG BASE_IMAGE=debian:12-slim
ARG BASE_IMAGE=debian:13-slim

FROM $BASE_IMAGE AS debsuryorg-key

Expand All @@ -22,16 +22,16 @@

ENV DRUPAL_DB_NAME=drupal
ENV DRUPAL_DB_USER=drupal
ENV DRUPAL_DB_PASSWORD=drupal

Check warning on line 25 in Dockerfile

View workflow job for this annotation

GitHub Actions / build / build-push

Sensitive data should not be used in the ARG or ENV commands

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "DRUPAL_DB_PASSWORD") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENV DRUPAL_TRUSTED_HOSTS='["drupal","localhost"]'
ENV POSTGRES_HOST=db
ENV MEMCACHED_HOST=memcached
ENV MEMCACHED_PORT=11211
ENV SOLR_HOST=solr
ENV SOLR_USERNAME=drupal
ENV SOLR_PASSWORD=drupal

Check warning on line 32 in Dockerfile

View workflow job for this annotation

GitHub Actions / build / build-push

Sensitive data should not be used in the ARG or ENV commands

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "SOLR_PASSWORD") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENV JWT_KEY_TYPE=RS256

Check warning on line 33 in Dockerfile

View workflow job for this annotation

GitHub Actions / build / build-push

Sensitive data should not be used in the ARG or ENV commands

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "JWT_KEY_TYPE") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENV JWT_KEY_FILE="/var/run/secrets/crayfish.key"

Check warning on line 34 in Dockerfile

View workflow job for this annotation

GitHub Actions / build / build-push

Sensitive data should not be used in the ARG or ENV commands

SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "JWT_KEY_FILE") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
ENV IIIF_URL=http://cantaloupe/iiif/2
ENV IIIF_INGRESS_URL=http://drupal/iiif/2
ENV ACTIVEMQ_HOST=activemq
Expand Down