Skip to content

Commit 7cc3ddc

Browse files
adimoftadimoft
authored
Filter some images from signing (#609)
1 parent 2a89129 commit 7cc3ddc

File tree

6 files changed

+48
-6
lines changed

6 files changed

+48
-6
lines changed

‎.github/workflows/post-merge-admin.yml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,14 @@ jobs:
3838
prefix_tag_separator: "/"
3939
project_folder: apps/admin
4040
run_version_dev: true
41-
trivy_image_skip: "ghcr.io/dependabot/dependabot-updater-core:latest"
41+
trivy_image_skip: |
42+
ghcr.io/dependabot/dependabot-updater-core:latest,
43+
ghcr.io/github/github-mcp-server:latest,
44+
ghcr.io/github/gh-aw-mcpg:latest,
45+
ghcr.io/github/gh-aw-firewall/agent:latest,
46+
ghcr.io/github/gh-aw-firewall/api-proxy:latest,
47+
ghcr.io/github/gh-aw-firewall/squid:latest,
48+
debian@sha256:0a5bf4ecacfc050bad0131c8e1401063fd1e8343a418723f6dbd3cd13a7b9e33
4249
secrets:
4350
SYS_EMF_GH_TOKEN: ${{ secrets.SYS_EMF_GH_TOKEN }}
4451
NO_AUTH_ECR_PUSH_USERNAME: ${{ secrets.NO_AUTH_ECR_PUSH_USERNAME }}

‎.github/workflows/post-merge-app-orch.yml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,14 @@ jobs:
3838
prefix_tag_separator: "/"
3939
project_folder: apps/app-orch
4040
run_version_dev: true
41-
trivy_image_skip: "ghcr.io/dependabot/dependabot-updater-core:latest"
41+
trivy_image_skip: |
42+
ghcr.io/dependabot/dependabot-updater-core:latest,
43+
ghcr.io/github/github-mcp-server:latest,
44+
ghcr.io/github/gh-aw-mcpg:latest,
45+
ghcr.io/github/gh-aw-firewall/agent:latest,
46+
ghcr.io/github/gh-aw-firewall/api-proxy:latest,
47+
ghcr.io/github/gh-aw-firewall/squid:latest,
48+
debian@sha256:0a5bf4ecacfc050bad0131c8e1401063fd1e8343a418723f6dbd3cd13a7b9e33
4249
secrets:
4350
SYS_EMF_GH_TOKEN: ${{ secrets.SYS_EMF_GH_TOKEN }}
4451
NO_AUTH_ECR_PUSH_USERNAME: ${{ secrets.NO_AUTH_ECR_PUSH_USERNAME }}

‎.github/workflows/post-merge-cluster-orch.yml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,14 @@ jobs:
3838
prefix_tag_separator: "/"
3939
project_folder: apps/cluster-orch
4040
run_version_dev: true
41-
trivy_image_skip: "ghcr.io/dependabot/dependabot-updater-core:latest"
41+
trivy_image_skip: |
42+
ghcr.io/dependabot/dependabot-updater-core:latest,
43+
ghcr.io/github/github-mcp-server:latest,
44+
ghcr.io/github/gh-aw-mcpg:latest,
45+
ghcr.io/github/gh-aw-firewall/agent:latest,
46+
ghcr.io/github/gh-aw-firewall/api-proxy:latest,
47+
ghcr.io/github/gh-aw-firewall/squid:latest,
48+
debian@sha256:0a5bf4ecacfc050bad0131c8e1401063fd1e8343a418723f6dbd3cd13a7b9e33
4249
secrets:
4350
SYS_EMF_GH_TOKEN: ${{ secrets.SYS_EMF_GH_TOKEN }}
4451
NO_AUTH_ECR_PUSH_USERNAME: ${{ secrets.NO_AUTH_ECR_PUSH_USERNAME }}

‎.github/workflows/post-merge-infra.yml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,14 @@ jobs:
3838
prefix_tag_separator: "/"
3939
project_folder: apps/infra
4040
run_version_dev: true
41-
trivy_image_skip: "ghcr.io/dependabot/dependabot-updater-core:latest"
41+
trivy_image_skip: |
42+
ghcr.io/dependabot/dependabot-updater-core:latest,
43+
ghcr.io/github/github-mcp-server:latest,
44+
ghcr.io/github/gh-aw-mcpg:latest,
45+
ghcr.io/github/gh-aw-firewall/agent:latest,
46+
ghcr.io/github/gh-aw-firewall/api-proxy:latest,
47+
ghcr.io/github/gh-aw-firewall/squid:latest,
48+
debian@sha256:0a5bf4ecacfc050bad0131c8e1401063fd1e8343a418723f6dbd3cd13a7b9e33
4249
secrets:
4350
SYS_EMF_GH_TOKEN: ${{ secrets.SYS_EMF_GH_TOKEN }}
4451
NO_AUTH_ECR_PUSH_USERNAME: ${{ secrets.NO_AUTH_ECR_PUSH_USERNAME }}

‎.github/workflows/post-merge-root.yml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,14 @@ jobs:
3838
prefix_tag_separator: "/"
3939
project_folder: apps/root
4040
run_version_dev: true
41-
trivy_image_skip: "ghcr.io/dependabot/dependabot-updater-core:latest"
41+
trivy_image_skip: |
42+
ghcr.io/dependabot/dependabot-updater-core:latest,
43+
ghcr.io/github/github-mcp-server:latest,
44+
ghcr.io/github/gh-aw-mcpg:latest,
45+
ghcr.io/github/gh-aw-firewall/agent:latest,
46+
ghcr.io/github/gh-aw-firewall/api-proxy:latest,
47+
ghcr.io/github/gh-aw-firewall/squid:latest,
48+
debian@sha256:0a5bf4ecacfc050bad0131c8e1401063fd1e8343a418723f6dbd3cd13a7b9e33
4249
secrets:
4350
SYS_EMF_GH_TOKEN: ${{ secrets.SYS_EMF_GH_TOKEN }}
4451
NO_AUTH_ECR_PUSH_USERNAME: ${{ secrets.NO_AUTH_ECR_PUSH_USERNAME }}

‎.github/workflows/post-merge-tests.yml‎

Lines changed: 8 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,14 @@ jobs:
3737
run_version_dev: true
3838
prefix_tag_separator: "/"
3939
project_folder: tests
40-
trivy_image_skip: "ghcr.io/dependabot/dependabot-updater-core:latest"
40+
trivy_image_skip: |
41+
ghcr.io/dependabot/dependabot-updater-core:latest,
42+
ghcr.io/github/github-mcp-server:latest,
43+
ghcr.io/github/gh-aw-mcpg:latest,
44+
ghcr.io/github/gh-aw-firewall/agent:latest,
45+
ghcr.io/github/gh-aw-firewall/api-proxy:latest,
46+
ghcr.io/github/gh-aw-firewall/squid:latest,
47+
debian@sha256:0a5bf4ecacfc050bad0131c8e1401063fd1e8343a418723f6dbd3cd13a7b9e33
4148
secrets:
4249
SYS_EMF_GH_TOKEN: ${{ secrets.SYS_EMF_GH_TOKEN }}
4350
NO_AUTH_ECR_PUSH_USERNAME: ${{ secrets.NO_AUTH_ECR_PUSH_USERNAME }}

0 commit comments

Comments
 (0)