vikarti.anatra/Skyvern
1
0
Fork 0
mirror of https://github.com/Skyvern-AI/skyvern.git synced 2026-05-01 05:00:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3

ci: add zizmor workflow and pin all GitHub Actions to SHA hashes (#5237)

Browse source
This commit is contained in:
Benji Visser 2026-03-25 12:28:41 -04:00 • committed by GitHub
parent e909d3e4a1
commit f84563175f
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
15 changed files with 92 additions and 41 deletions
Download patch file Download diff file Expand all files Collapse all files

16
.github/workflows/build-docker-image.yml vendored
View file

@ -22,28 +22,30 @@ jobs:
needs: [run-ci]
steps:
- name: Check out Git repository
uses: actions/checkout@v4
uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
persist-credentials: false
- name: Configure AWS credentials
uses: aws-actions/configure-aws-credentials@v4
uses: aws-actions/configure-aws-credentials@7474bc4690e29a8392af63c5b98e7449536d5c3a # v4
with:
aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}
aws-region: ${{ env.AWS_REGION }}
- name: Login to Amazon ECR Public
id: login-ecr-public
uses: aws-actions/amazon-ecr-login@v2
uses: aws-actions/amazon-ecr-login@183a1442edf41672e66566b7fc560e297a290896 # v2
with:
registry-type: public
- name: Login to Docker Hub
uses: docker/login-action@v3
uses: docker/login-action@c94ce9fb468520275223c153574b00df6fe4bcc9 # v3
with:
username: ${{ env.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
uses: docker/setup-buildx-action@8d2750c68a42422c14e847fe6c8ac0403b4cbd6f # v3
- name: Build, tag, and push backend image to Amazon Public ECR and Docker Hub
id: build-image
uses: docker/build-push-action@v6
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
env:
ECR_REGISTRY: ${{ steps.login-ecr-public.outputs.registry }}
with:
@ -63,7 +65,7 @@ jobs:
${{ env.DOCKERHUB_USERNAME }}/${{ env.ECR_BACKEND_REPOSITORY }}:latest
- name: Build, tag, and push ui image to Amazon Public ECR and Docker Hub
id: build-ui-image
uses: docker/build-push-action@v6
uses: docker/build-push-action@10e90e3645eae34f1e60eeb005ba3a3d33f178e8 # v6
env:
ECR_REGISTRY: ${{ steps.login-ecr-public.outputs.registry }}
with: