MobSF/Mobile-Security-Framework-MobSF
1
0
Fork 0
mirror of https://github.com/MobSF/Mobile-Security-Framework-MobSF.git synced 2026-10-12 02:06:59 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci: bump docker workflow actions and add SBOM attestations (#2639)

Browse Source 
Bump Docker CI action majors across docker-latest.yml, docker-release.yml, and docker-test.yml:
actions/checkout v3 → v7
docker/setup-qemu-action / setup-buildx-action / login-action v3 → v4
docker/build-push-action v5 → pinned v7.3.0 (53b7df96c91f9c12dcc8a07bcb9ccacbed38856a)
Attach SBOM attestations (sbom: true) and pin provenance (provenance: mode=max) on image pushes (:latest and release tags).
Disable provenance on PR test builds (push: false), where registry attestations are not applicable.

---------

Co-authored-by: Ajin Abraham <[email protected]>
Co-authored-by: Cursor <[email protected]>
This commit is contained in:
Kobi Hikri
2026-08-09 17:10:24 -07:00
committed by GitHub
co-authored by Ajin Abraham Cursor
parent 3eadf6cc0a
commit a20d60bf12
3 changed files with 27 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/docker-latest.yml
+9 -7
View File
@@ -14,25 +14,27 @@ jobs:
steps: steps:
- -
name: Checkout name: Checkout
uses: actions/checkout@v3 uses: actions/checkout@v7
- -
name: Set up QEMU name: Set up QEMU
uses: docker/setup-qemu-action@v3 uses: docker/setup-qemu-action@v4
- -
name: Set up Docker Buildx name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3 uses: docker/setup-buildx-action@v4
- -
name: Login to DockerHub name: Login to DockerHub
uses: docker/login-action@v3 uses: docker/login-action@v4
with: with:
username: ${{ secrets.DOCKER_USERNAME }} username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_TOKEN }} password: ${{ secrets.DOCKER_TOKEN }}
- -
name: Build and push AMD64, ARM64 images name: Build and push AMD64, ARM64 images
id: docker_build id: docker_build
uses: docker/build-push-action@v5 uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
with: with:
push: true push: true
provenance: mode=max
sbom: true
context: . context: .
platforms: linux/amd64,linux/arm64 platforms: linux/amd64,linux/arm64
tags: opensecurity/mobile-security-framework-mobsf:latest tags: opensecurity/mobile-security-framework-mobsf:latest
.github/workflows/docker-release.yml
+9 -7
View File
@@ -13,16 +13,16 @@ jobs:
steps: steps:
- -
name: Checkout name: Checkout
uses: actions/checkout@v3 uses: actions/checkout@v7
- -
name: Set up QEMU name: Set up QEMU
uses: docker/setup-qemu-action@v3 uses: docker/setup-qemu-action@v4
- -
name: Set up Docker Buildx name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3 uses: docker/setup-buildx-action@v4
- -
name: Login to DockerHub name: Login to DockerHub
uses: docker/login-action@v3 uses: docker/login-action@v4
with: with:
username: ${{ secrets.DOCKER_USERNAME }} username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_TOKEN }} password: ${{ secrets.DOCKER_TOKEN }}
@@ -39,9 +39,11 @@ jobs:
- -
name: Build and push AMD64, ARM64 image release name: Build and push AMD64, ARM64 image release
id: docker_build id: docker_build
uses: docker/build-push-action@v5 uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
with: with:
push: true push: true
provenance: mode=max
sbom: true
context: . context: .
platforms: linux/amd64,linux/arm64 platforms: linux/amd64,linux/arm64
tags: ${{ steps.release.outputs.tag }} tags: ${{ steps.release.outputs.tag }}
.github/workflows/docker-test.yml
+9 -7
View File
@@ -13,28 +13,30 @@ jobs:
steps: steps:
- -
name: Checkout name: Checkout
uses: actions/checkout@v3 uses: actions/checkout@v7
- -
name: Set up QEMU name: Set up QEMU
uses: docker/setup-qemu-action@v3 uses: docker/setup-qemu-action@v4
- -
name: Set up Docker Buildx name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3 uses: docker/setup-buildx-action@v4
- -
name: Build AMD64 image name: Build AMD64 image
id: docker_build_amd id: docker_build_amd
uses: docker/build-push-action@v5 uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
with: with:
push: false push: false
provenance: false
context: . context: .
platforms: linux/amd64 platforms: linux/amd64
tags: opensecurity/mobile-security-framework-mobsf:latest tags: opensecurity/mobile-security-framework-mobsf:latest
- -
name: Build ARM64 image name: Build ARM64 image
id: docker_build_arm id: docker_build_arm
uses: docker/build-push-action@v5 uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
with: with:
push: false push: false
provenance: false
context: . context: .
platforms: linux/arm64 platforms: linux/arm64
tags: opensecurity/mobile-security-framework-mobsf:latest tags: opensecurity/mobile-security-framework-mobsf:latest