jcoakley/dev1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

pipeline rewrite v5

Browse Source
This commit is contained in:
Josh 2025-08-08 13:29:05 +00:00
parent 315dd6bca7
commit 64fab06e8a
1 changed files with 13 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

23
.woodpecker.yml
View File

@ -11,21 +11,24 @@ steps:
- -c - -c
- | - |
set -euo pipefail set -euo pipefail
IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev) IMG_TAG=$(gcloud secrets versions access latest --secret=IMG_TAG --project=aptivaai-dev)
REG=us-central1-docker.pkg.dev/aptivaai-dev/aptiva-repo REG=us-central1-docker.pkg.dev/aptivaai-dev/aptiva-repo
apt-get update -qq # Fetch Trivy standalone binary (no apt, no docker required)
apt-get install -y -qq gnupg apt-transport-https curl ca-certificates docker.io TRIVY_VERSION=0.52.0
curl -fsSL -o /tmp/trivy.tgz \
"https://github.com/aquasecurity/trivy/releases/download/v${TRIVY_VERSION}/trivy_${TRIVY_VERSION}_Linux-64bit.tar.gz"
tar -xzf /tmp/trivy.tgz -C /usr/local/bin trivy
chmod +x /usr/local/bin/trivy
curl -sfL https://raw.githubusercontent.com/aquasecurity/trivy/main/contrib/install.sh | bash # Auth to Artifact Registry for Trivy's registry client
export TRIVY_USERNAME=oauth2accesstoken
export TRIVY_PASSWORD="$(gcloud auth print-access-token)"
gcloud auth configure-docker us-central1-docker.pkg.dev -q trivy image --exit-code 1 --severity CRITICAL "$REG/server1:$IMG_TAG"
trivy image --exit-code 1 --severity CRITICAL "$REG/server2:$IMG_TAG"
trivy image --exit-code 1 --severity CRITICAL $REG/server1:$IMG_TAG trivy image --exit-code 1 --severity CRITICAL "$REG/server3:$IMG_TAG"
trivy image --exit-code 1 --severity CRITICAL $REG/server2:$IMG_TAG trivy image --exit-code 1 --severity CRITICAL "$REG/nginx:$IMG_TAG"
trivy image --exit-code 1 --severity CRITICAL $REG/server3:$IMG_TAG
trivy image --exit-code 1 --severity CRITICAL $REG/nginx:$IMG_TAG
- name: staging-deploy - name: staging-deploy
image: google/cloud-sdk:latest image: google/cloud-sdk:latest