willemjan/glucose-dashboard
1
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Projects Releases Wiki Activity

Fix registry hostname (duckdns) and Trivy github auth #4

Merged
willemjan merged 2 commits from dev into main 2026-07-25 20:05:34 +00:00
Conversation 0 Commits 2 Files Changed 2
+11 -7
2 changed files with 11 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit e0d6b79e68 - Show all commits
.gitea/workflows/pipeline.yml
+10 -6
View File
@@ -47,23 +47,27 @@ jobs:
steps:
- uses: actions/checkout@v4
- name: Build Docker image
run: docker build -t gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }} .
run: docker build -t gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }} .
- name: Trivy scan
uses: aquasecurity/trivy-action@master
with:
image-ref: gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }}
image-ref: gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }}
severity: CRITICAL,HIGH
exit-code: "1" # laat de pipeline falen bij kritieke kwetsbaarheden
# gitea.token is geen geldig GitHub-token; leeg laten zodat setup-trivy
# de aquasecurity/trivy-repo anoniem kan clonen in plaats van een
# ongeldige Authorization-header naar github.com te sturen.
token-setup-trivy: ""
- name: Login bij Gitea-registry
run: echo "${{ secrets.GLUCOSE_TOKEN }}" | docker login gitea.zb.local -u willem --password-stdin
run: echo "${{ secrets.GLUCOSE_TOKEN }}" | docker login gitea.zb-kw.duckdns.org -u willemjan --password-stdin
- name: Tag en push
run: |
docker tag gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }} gitea.zb.local/willem/glucose-dashboard:latest
docker push gitea.zb.local/willem/glucose-dashboard:${{ gitea.sha }}
docker push gitea.zb.local/willem/glucose-dashboard:latest
docker tag gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }} gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:latest
docker push gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:${{ gitea.sha }}
docker push gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:latest
# ---------------------------------------------------------------------
# 4. Deploy — SSH naar de LXC en herstart met de nieuwe image
docker-compose.yml
+1 -1
View File
@@ -1,6 +1,6 @@
services:
glucose-dashboard:
image: gitea.zb.local/willem/glucose-dashboard:latest
image: gitea.zb-kw.duckdns.org/willemjan/glucose-dashboard:latest
container_name: glucose-dashboard
restart: unless-stopped
ports: