dip/service-catalog
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

chore: pin sbom pipeline image, use paasup dockerhub secrets

Browse Source 
Switch cve-edge-post.yml to a fixed docker.io/paasup/sbom-pipeline
image and paasup-specific Docker Hub credentials, dropping the nvcr.io
auth entry.
This commit is contained in:
ychangkim
2026-07-20 17:35:57 +09:00
parent 9b368e4cfc
commit 9b6d978e31
1 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/cve-edge-post.yml
+5 -6
View File
@@ -29,7 +29,7 @@ jobs:
runs-on: ubuntu-latest runs-on: ubuntu-latest
timeout-minutes: 120 timeout-minutes: 120
container: container:
image: ${{ vars.SBOM_PIPELINE_IMAGE }} image: docker.io/paasup/sbom-pipeline
env: env:
OUT_DIR: ${{ github.workspace }}/sbom-out OUT_DIR: ${{ github.workspace }}/sbom-out
TRIVY_CACHE_DIR: ${{ github.workspace }}/sbom-out/cache TRIVY_CACHE_DIR: ${{ github.workspace }}/sbom-out/cache
@@ -51,8 +51,8 @@ jobs:
# 사설 레지스트리 인증: 시크릿으로 docker config.json 을 만들어 trivy 가 읽게 한다. # 사설 레지스트리 인증: 시크릿으로 docker config.json 을 만들어 trivy 가 읽게 한다.
- name: 레지스트리 인증 구성 - name: 레지스트리 인증 구성
env: env:
DOCKERHUB_USER: ${{ secrets.DOCKERHUB_USER }} DOCKERHUB_USER: ${{ secrets.DOCKERHUB_PAASUP_USER }}
DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }} DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_PAASUP_TOKEN }}
NGC_API_KEY: ${{ secrets.NGC_API_KEY }} NGC_API_KEY: ${{ secrets.NGC_API_KEY }}
run: | run: |
mkdir -p "$OUT_DIR/.docker" mkdir -p "$OUT_DIR/.docker"
@@ -62,9 +62,8 @@ jobs:
def add(reg,user,secret): def add(reg,user,secret):
if user and secret: if user and secret:
auths[reg]={"auth":base64.b64encode(f"{user}:{secret}".encode()).decode()} auths[reg]={"auth":base64.b64encode(f"{user}:{secret}".encode()).decode()}
add("https://index.docker.io/v1/", os.environ.get("DOCKERHUB_USER"), os.environ.get("DOCKERHUB_TOKEN")) add("https://index.docker.io/v1/", os.environ.get("DOCKERHUB_PAASUP_USER"), os.environ.get("DOCKERHUB_PAASUP_TOKEN"))
add("docker.getcollate.io", os.environ.get("DOCKERHUB_USER"), os.environ.get("DOCKERHUB_TOKEN")) add("docker.getcollate.io", os.environ.get("DOCKERHUB_PAASUP_USER"), os.environ.get("DOCKERHUB_PAASUP_TOKEN"))
add("nvcr.io", "$oauthtoken", os.environ.get("NGC_API_KEY"))
out=os.path.join(os.environ["OUT_DIR"],".docker","config.json") out=os.path.join(os.environ["OUT_DIR"],".docker","config.json")
json.dump({"auths":auths}, open(out,"w")) json.dump({"auths":auths}, open(out,"w"))
print("configured registries:", list(auths.keys()) or "(none)") print("configured registries:", list(auths.keys()) or "(none)")