Publish 2024.2.0 Dockerfiles (#307) #279
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Dockerfiles check | |
| on: | |
| push: | |
| paths: | |
| - 'dockerfiles/**/*ockerfile' | |
| pull_request: | |
| paths: | |
| - 'dockerfiles/**/*ockerfile' | |
| permissions: read-all | |
| jobs: | |
| hadolint_check: | |
| runs-on: ubuntu-20.04 | |
| steps: | |
| - name: Code checkout | |
| uses: actions/checkout@v2 | |
| - name: Run hadolint dockerfiles check | |
| shell: bash | |
| run: | | |
| set -o pipefail | |
| has_issues=0 | |
| while IFS= read -r -d '' dockerfile | |
| do | |
| echo "Scanning $dockerfile" | |
| docker run --rm -i hadolint/hadolint:latest hadolint \ | |
| --ignore DL3059 \ | |
| --ignore DL3006 \ | |
| --ignore DL3008 \ | |
| - < "$dockerfile" | tee "${dockerfile}".log || has_issues=1 | |
| grep -in proxy "$dockerfile" | tee -a "${dockerfile}".log && has_issues=1 || true | |
| echo | |
| name=$(echo "$dockerfile" | grep -oP '(?<=dockerfiles/).*' | tr / _) | |
| cp "$dockerfile" "$name" | |
| cp "$dockerfile".log "${name}.log" | |
| done < <(find dockerfiles/ \( -name '*.dockerfile' -o -name 'Dockerfile' \) -print0) | |
| exit "$has_issues" | |
| - name: Collecting artifacts | |
| uses: actions/upload-artifact@v2 | |
| if: ${{ always() }} | |
| with: | |
| name: hadolint_results | |
| path: | | |
| ./*.log | |
| ./*ockerfile |