inventree/InvenTree
2
0
Fork 0
mirror of https://github.com/inventree/InvenTree.git synced 2025-06-15 19:45:46 +00:00
Code Activity

chore: improve ci security (#9384)

Browse Source 
* pin docker files

* pin github actions

* enforce hashes that are already present

* run style checks on cicd changes
This commit is contained in:
Matthias Mair
2025-03-26 03:04:45 +01:00
committed by GitHub
parent 2bd26c0f49
commit 9bc0d599bc
6 changed files with 11 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
.github/workflows/docker.yaml vendored
View File

@ -170,11 +170,11 @@ jobs:
images: |
inventree/inventree
ghcr.io/${{ github.repository }}
- uses: depot/setup-action@v1
- uses: depot/setup-action@b0b1ea4f69e92ebf5dea3f8713a1b0c37b2126a5 # pin@v1
- name: Push Docker Images
id: push-docker
if: github.event_name != 'pull_request'
uses: depot/build-push-action@v1
uses: depot/build-push-action@636daae76684e38c301daa0c5eca1c095b24e780 # pin@v1
with:
project: jczzbjkk68
context: .

2
.github/workflows/qc_checks.yaml vendored
View File

@ -79,7 +79,7 @@ jobs:
name: Style [pre-commit]
runs-on: ubuntu-24.04
needs: paths-filter
if: needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.frontend == 'true' || needs.paths-filter.outputs.requirements == 'true' || needs.paths-filter.outputs.force == 'true'
if: needs.paths-filter.outputs.cicd == 'true' || needs.paths-filter.outputs.server == 'true' || needs.paths-filter.outputs.frontend == 'true' || needs.paths-filter.outputs.requirements == 'true' || needs.paths-filter.outputs.force == 'true'
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4.2.2