From 9b6d978e319d4899402e6295b917b37b8026bc46 Mon Sep 17 00:00:00 2001 From: ychangkim Date: Mon, 20 Jul 2026 17:35:57 +0900 Subject: [PATCH] chore: pin sbom pipeline image, use paasup dockerhub secrets Switch cve-edge-post.yml to a fixed docker.io/paasup/sbom-pipeline image and paasup-specific Docker Hub credentials, dropping the nvcr.io auth entry. --- .github/workflows/cve-edge-post.yml | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/.github/workflows/cve-edge-post.yml b/.github/workflows/cve-edge-post.yml index ce01547..56e41d8 100644 --- a/.github/workflows/cve-edge-post.yml +++ b/.github/workflows/cve-edge-post.yml @@ -29,7 +29,7 @@ jobs: runs-on: ubuntu-latest timeout-minutes: 120 container: - image: ${{ vars.SBOM_PIPELINE_IMAGE }} + image: docker.io/paasup/sbom-pipeline env: OUT_DIR: ${{ github.workspace }}/sbom-out TRIVY_CACHE_DIR: ${{ github.workspace }}/sbom-out/cache @@ -51,8 +51,8 @@ jobs: # 사설 레지스트리 인증: 시크릿으로 docker config.json 을 만들어 trivy 가 읽게 한다. - name: 레지스트리 인증 구성 env: - DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }} - DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }} + DOCKERHUB_USER: ${{ secrets.DOCKERHUB_PAASUP_USER }} + DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_PAASUP_TOKEN }} NGC_API_KEY: ${{ secrets.NGC_API_KEY }} run: | mkdir -p "$OUT_DIR/.docker" @@ -62,9 +62,8 @@ jobs: def add(reg,user,secret): if user and secret: auths[reg]={"auth":base64.b64encode(f"{user}:{secret}".encode()).decode()} - add("https://index.docker.io/v1/", os.environ.get("DOCKERHUB_USER"), os.environ.get("DOCKERHUB_TOKEN")) - add("docker.getcollate.io", os.environ.get("DOCKERHUB_USER"), os.environ.get("DOCKERHUB_TOKEN")) - add("nvcr.io", "$oauthtoken", os.environ.get("NGC_API_KEY")) + add("https://index.docker.io/v1/", os.environ.get("DOCKERHUB_PAASUP_USER"), os.environ.get("DOCKERHUB_PAASUP_TOKEN")) + add("docker.getcollate.io", os.environ.get("DOCKERHUB_PAASUP_USER"), os.environ.get("DOCKERHUB_PAASUP_TOKEN")) out=os.path.join(os.environ["OUT_DIR"],".docker","config.json") json.dump({"auths":auths}, open(out,"w")) print("configured registries:", list(auths.keys()) or "(none)")