Skip to content

chore(deps): update github-actions #1966

chore(deps): update github-actions

chore(deps): update github-actions #1966

Workflow file for this run

name: ci
on:
push:
branches: [master]
release:
types: [created]
pull_request:
branches: [master]
permissions: read-all
jobs:
build:

Check failure on line 14 in .github/workflows/ci.yaml

View workflow run for this annotation

GitHub Actions / ci

Invalid workflow file

The workflow is not valid. .github/workflows/ci.yaml (Line: 14, Col: 3): Error calling workflow 'chgl/.github/.github/workflows/standard-build.yaml@ad7ade01e8d5b16396a0557bd648bfa2eee7abb4'. The nested job 'upload-attestion-to-release' is requesting 'contents: write', but is only allowed 'contents: read'.
uses: chgl/.github/.github/workflows/standard-build.yaml@ad7ade01e8d5b16396a0557bd648bfa2eee7abb4 # v1.8.0
permissions:
contents: read
id-token: write
packages: write
pull-requests: write
actions: read
security-events: write
with:
enable-build-test-layer: false
enable-upload-test-image: false
secrets:
github-token: ${{ secrets.GITHUB_TOKEN }}
lint:
uses: chgl/.github/.github/workflows/standard-lint.yaml@ad7ade01e8d5b16396a0557bd648bfa2eee7abb4 # v1.8.0
permissions:
contents: read
pull-requests: write
issues: write
security-events: write
actions: read
with:
enable-codeql: false
enable-validate-gradle-wrapper: false
enable-verify-base-image-signature: false
secrets:
github-token: ${{ secrets.GITHUB_TOKEN }}
release:
uses: chgl/.github/.github/workflows/standard-release.yaml@ad7ade01e8d5b16396a0557bd648bfa2eee7abb4 # v1.8.0
needs:
- build
permissions:
contents: write
pull-requests: write
issues: write
secrets:
semantic-release-token: ${{ secrets.CI_SEMANTIC_RELEASE_TOKEN }}
copy-image-to-dockerhub:
name: copy ghcr.io image to DockerHub
if: ${{ github.event_name != 'pull_request' }}
runs-on: ubuntu-22.04
needs:
- build
steps:
- uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4
- name: Login to DockerHub
env:
DOCKERHUB_TOKEN: "${{ secrets.DOCKERHUB_TOKEN }}"
run: |
echo "${DOCKERHUB_TOKEN}" | crane auth login docker.io --username chgl --password-stdin
- name: Copy all tags
env:
TAGS: ${{ needs.build.outputs.image-tags }}
run: |
echo "${TAGS}" | while read -r tag; do crane copy "$tag" "${tag/ghcr.io/docker.io}"; done