Skip to content

Add CI workflow to build, scan, and push systemd-logs image#240

Open
testsabirweb wants to merge 2 commits intovmware-tanzu:mainfrom
testsabirweb:automate-systemd-logs-build-push
Open

Add CI workflow to build, scan, and push systemd-logs image#240
testsabirweb wants to merge 2 commits intovmware-tanzu:mainfrom
testsabirweb:automate-systemd-logs-build-push

Conversation

@testsabirweb
Copy link
Copy Markdown

Adds .github/workflows/build-push.yaml which automates:

  • Building sonobuoy/systemd-logs (amd64) on every PR and push to main
  • Running Trivy vulnerability scanning (CRITICAL/HIGH) against the built image
  • Pushing multi-arch images (amd64, arm64, ppc64le, s390x) to Docker Hub on merges to main or tags, using the existing make push Makefile target

Workflow is path-filtered to systemd-logs/** to avoid unnecessary runs.

Fixes #178, addresses #236.

Adds .github/workflows/build-push.yaml which automates:
- Building sonobuoy/systemd-logs (amd64) on every PR and push to main
- Running Trivy vulnerability scanning (CRITICAL/HIGH) against the built image
- Pushing multi-arch images (amd64, arm64, ppc64le, s390x) to Docker Hub
  on merges to main or tags, using the existing `make push` Makefile target

Workflow is path-filtered to systemd-logs/** to avoid unnecessary runs.

Fixes vmware-tanzu#178, addresses vmware-tanzu#236.

Signed-off-by: Sabir Ali <sabir.ali@spectrocloud.com>
ARCH defaults to amd64 in the Makefile, so the explicit override is
unnecessary. The intent (single-arch build for fast PR checks) is
preserved by using build-container rather than container.

Signed-off-by: Sabir Ali <sabir.ali@spectrocloud.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Automate publishing image to Docker Hub

1 participant