Skip to content

Merge pull request #284 from smallstep/max/goreleaser-permissions #21

Merge pull request #284 from smallstep/max/goreleaser-permissions

Merge pull request #284 from smallstep/max/goreleaser-permissions #21

Triggered via push September 17, 2024 20:29
Status Success
Total duration 12m 32s
Artifacts 4

release.yml

on: push
Matrix: ci / ci / codeql / CodeQL Analyze
ci  /  ...  /  set-go-matrix
0s
ci / ci / build / set-go-matrix
ci  /  ...  /  set-go-matrix
0s
ci / ci / test / set-go-matrix
ci  /  ...  /  actionlint
5s
ci / ci / actionlint
ci  /  ...  /  lint
1m 0s
ci / ci / lint / lint
ci  /  ...  /  govulncheck
23s
ci / ci / govulncheck / govulncheck
Matrix: ci / ci / build / build
Matrix: ci / ci / test / test
Create Release
3s
Create Release
goreleaser  /  Upload Assets To Github w/ goreleaser
1m 16s
goreleaser / Upload Assets To Github w/ goreleaser
Build & Upload Autocert Init Docker Images  /  Build & Upload Docker Images
51s
Build & Upload Autocert Init Docker Images / Build & Upload Docker Images
Build & Upload Autocert Renewer Images  /  Build & Upload Docker Images
43s
Build & Upload Autocert Renewer Images / Build & Upload Docker Images
Build & Upload Autocert Bootstrapper Images  /  Build & Upload Docker Images
42s
Build & Upload Autocert Bootstrapper Images / Build & Upload Docker Images
Build & Upload Autocert Bootstrapper Images  /  Build & Upload Docker Images
9m 40s
Build & Upload Autocert Bootstrapper Images / Build & Upload Docker Images
Fit to window
Zoom out
Zoom in

Annotations

4 warnings
Sensitive data should not be used in the ARG or ENV commands: bootstrapper/Dockerfile#L5
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "KEY") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
Sensitive data should not be used in the ARG or ENV commands: renewer/Dockerfile#L5
SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "KEY") More info: https://docs.docker.com/go/dockerfile/rule/secrets-used-in-arg-or-env/
goreleaser / Upload Assets To Github w/ goreleaser
You are using 'latest' as default version. Will lock to '~> v2'.
JSON arguments recommended for ENTRYPOINT/CMD to prevent unintended behavior related to OS signals: controller/Dockerfile#L17
JSONArgsRecommended: JSON arguments recommended for ENTRYPOINT to prevent unintended behavior related to OS signals More info: https://docs.docker.com/go/dockerfile/rule/json-args-recommended/

Artifacts

Produced during runtime
Name Size
smallstep~autocert~I02L1Y.dockerbuild Expired
30 KB
smallstep~autocert~I2IFJD.dockerbuild Expired
43.6 KB
smallstep~autocert~J8ET0O.dockerbuild Expired
70 KB
smallstep~autocert~TQELJJ.dockerbuild Expired
52.5 KB