dependabot[bot]
f6d554118f
Bump docker/build-push-action from 3.1.1 to 3.2.0 ( #6405 )
2022-10-19 21:14:43 +01:00
dependabot[bot]
681ed957d2
Bump docker/build-push-action from 3.1.0 to 3.1.1
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/v3.1.0...v3.1.1 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-08-15 12:24:41 -07:00
dependabot[bot]
053c3ec9e8
Bump docker/build-push-action from 3.0.0 to 3.1.0
...
Bumps [docker/build-push-action](https://github.com/docker/build-push-action ) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/docker/build-push-action/releases )
- [Commits](https://github.com/docker/build-push-action/compare/v3.0.0...v3.1.0 )
---
updated-dependencies:
- dependency-name: docker/build-push-action
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2022-08-02 09:27:27 +03:00
Nuno Lopes
63ea7bd569
Revert "Bump docker/build-push-action from 3.0.0 to 3.1.0 ( #6192 )"
...
This reverts commit 32bb60ea01
2022-07-26 15:21:52 +01:00
dependabot[bot]
32bb60ea01
Bump docker/build-push-action from 3.0.0 to 3.1.0 ( #6192 )
2022-07-26 15:17:58 +01:00
dependabot[bot]
a7b6f30b29
Bump docker/metadata-action from 3 to 4 ( #6086 )
2022-06-07 19:41:36 +01:00
dependabot[bot]
c05c75c109
Bump docker/login-action from 1 to 2 ( #6068 )
2022-06-02 09:57:17 +01:00
dependabot[bot]
f54e8e55de
Bump docker/build-push-action from 2.7.0 to 3.0.0 ( #6069 )
2022-06-02 09:57:00 +01:00
dependabot[bot]
b8367247f5
Bump actions/checkout from 2 to 3 ( #6066 )
2022-06-02 09:14:08 +01:00
Naveen
8384c321fc
chore: Set permissions for GitHub actions ( #6063 )
...
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/ )
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
2022-06-01 20:02:45 -07:00
Nikolaj Bjorner
ec3e296050
Update docker-image.yml ( #5739 )
...
* Update docker-image.yml
towards tweaking script to use ghcr
* Update docker-image.yml
* Update docker-image.yml
* Update docker-image.yml
change usr/pwd to names that are more descriptive
* Update docker-image.yml
rename back to use DOCKER prefix
it remains to bind to ghcr.io instead of docker.io
* Update ubuntu-20-04.Dockerfile
try to use ghcr instead of docker.io
* Update docker-image.yml
try with chcr token
* Update docker-image.yml
* Update docker-image.yml
* Update docker-image.yml
* Update ubuntu-20-04.Dockerfile
* Update docker-image.yml
2021-12-25 17:33:35 -08:00
Nikolaj Bjorner
6b0dc6d144
Create docker-image.yml
...
thanks #5735
2021-12-23 14:43:12 -08:00
