willemjan/glucose-dashboard
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Merge pull request 'Fix registry hostname (duckdns) and Trivy github auth' (#4) from dev into main
CI/CD / test (push) Successful in 6s
Details
CI/CD / sonarqube (push) Successful in 20s
Details
CI/CD / build-and-scan (push) Failing after 10s
Details
CI/CD / deploy (push) Skipped
Details

Browse Source
This commit was merged in pull request #4.
This commit is contained in:
willemjan
2026-07-25 20:05:33 +00:00
parent 274d27c5bc e0d6b79e68
commit e3443e9f9f
2 changed files with 12 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/pipeline.yml
+11 -7
View File
@@ -33,7 +33,7 @@ jobs:
with:
fetch-depth: 0 # SonarQube wil de volledige git-historie zien
- name: SonarQube scan
uses: sonarsource/sonarqube-scan-action@v4
uses: sonarsource/sonarqube-scan-action@v6
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
SONAR_HOST_URL: ${{ vars.SONAR_HOST_URL }}
@@ -47,23 +47,27 @@ jobs:
steps:
- uses: actions/checkout@v4
- name: Build Docker image
run: docker build -t gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }} .
run: docker build -t gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }} .
- name: Trivy scan
uses: aquasecurity/trivy-action@master
with:
image-ref: gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }}
image-ref: gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }}
severity: CRITICAL,HIGH
exit-code: "1" # laat de pipeline falen bij kritieke kwetsbaarheden
# gitea.token is geen geldig GitHub-token; leeg laten zodat setup-trivy
# de aquasecurity/trivy-repo anoniem kan clonen in plaats van een
# ongeldige Authorization-header naar github.com te sturen.
token-setup-trivy: ""
- name: Login bij Gitea-registry
run: echo "${{ secrets.GLUCOSE_TOKEN }}" | docker login gitea.zb.local -u willem --password-stdin
run: echo "${{ secrets.GLUCOSE_TOKEN }}" | docker login gitea.zb-kw.duckdns.org -u willemjan --password-stdin
- name: Tag en push
run: |
docker tag gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }} gitea.zb.local/willem/glucose-dashboard:latest
docker push gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }}
docker push gitea.zb.local/willem/glucose-dashboard:latest
docker tag gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }} gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:latest
docker push gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }}
docker push gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:latest
# ---------------------------------------------------------------------
# 4. Deploy — SSH naar de LXC en herstart met de nieuwe image
docker-compose.yml
+1 -1
View File
@@ -1,6 +1,6 @@
services:
glucose-dashboard:
image: gitea.zb.local/willem/glucose-dashboard:latest
image: gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:latest
container_name: glucose-dashboard
restart: unless-stopped
ports: