Update CI vulnerability workflow to reduce how often the docker image is built#196

Closed

lisac wants to merge 52 commits intomainfrom

lisac/ci-vulnerability-scans-build-image-once

Commits on Apr 17, 2025

Update .github/workflows/vulnerability-scans.yml

lisac
and
lorenyu
authored
rename job: build-and-cache -> build
lisac
committed
fix order: check that the cache exists before we try to use it
lisac
committed
move the cache-hit check to earlier in the job
lisac
committed
(lint fix) specify the path associated with the key we want to look up
lisac
committed
oops. need to check out the repo in order to use the Makefile.
lisac
committed
skip the trivy and anchore scans (temporarily)
lisac
committed
modify 'release-build' make command to allow for additional build flags
lisac
committed
simplify. remove logic for caching the buildx layers. reduce the task to building and caching a docker image of the app.
lisac
committed
experiment: don't checkout the repo unless we have to build the docker image
lisac
committed
specify 'fail-on-cache-miss: true' for the subsequent jobs that expect to find the docker image in the cache
lisac
committed
Revert "experiment: don't checkout the repo unless we have to build the docker image"
lisac
committed

Commits on May 4, 2025

Commits on May 5, 2025

Commits on May 9, 2025