mirror of
https://github.com/MobSF/Mobile-Security-Framework-MobSF.git
synced 2026-10-12 02:06:59 +00:00
* ci: bump Actions versions, pin Docker actions, add Dependabot Keep CI supply chain current after the Docker SBOM work: update test, publish, and CodeQL workflows, SHA-pin Docker setup/login actions, and enable weekly GitHub Actions Dependabot updates. Co-authored-by: Cursor <[email protected]> * docker: use Postgres latest and PG18 data volume layout Co-authored-by: Cursor <[email protected]> * Bump version to 4.5.2 Co-authored-by: Cursor <[email protected]> --------- Co-authored-by: Cursor <[email protected]>
41 lines
1.2 KiB
YAML
41 lines
1.2 KiB
YAML
name: 'Build and Publish to DockerHub'
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
jobs:
|
|
buildx:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
-
|
|
name: Checkout
|
|
uses: actions/checkout@v7
|
|
-
|
|
name: Set up QEMU
|
|
uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4.2.0
|
|
-
|
|
name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
|
|
-
|
|
name: Login to DockerHub
|
|
uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
|
|
with:
|
|
username: ${{ secrets.DOCKER_USERNAME }}
|
|
password: ${{ secrets.DOCKER_TOKEN }}
|
|
-
|
|
name: Build and push AMD64, ARM64 images
|
|
id: docker_build
|
|
uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
|
|
with:
|
|
push: true
|
|
provenance: mode=max
|
|
sbom: true
|
|
context: .
|
|
platforms: linux/amd64,linux/arm64
|
|
tags: opensecurity/mobile-security-framework-mobsf:latest
|