fix: tag with latest only when its config is true

fix(ci): fetch all necessary commits for commitsar and release notary
chore(deps): update actions/checkout action to v2
2025-12-16 13:59:02 +00:00 · 2022-01-24 10:46:25 +01:00 · 2022-01-24 10:45:57 +01:00 · 2022-01-24 10:13:55 +01:00 · 2022-01-24 10:11:09 +01:00 · 2022-01-24 10:04:50 +01:00
4 changed files with 15 additions and 8 deletions
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@ -6,6 +6,8 @@ jobs:
    runs-on: ubuntu-latest
    name: Verify commit messages
    steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
      - name: Run commitsar
-        uses: docker://aevea/commitsar
+        uses: docker://aevea/commitsar@sha256:b77adebc0437d4f2bfdf9205a39003e88acbc77a9176fd086b386207a5f3f5cb
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@ -10,10 +10,12 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
-        uses: actions/checkout@v1
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0

      - name: Release Notary Action
-        uses: docker://aevea/release-notary
+        uses: docker://aevea/release-notary@sha256:8b26ced466da96b23a947d5c9e58baac22ee1192fd08200011e5b178f42118a0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

--- a/2
+++ b/2
@ -15,7 +15,7 @@ RUN wget -O /kaniko/jq \
    wget -O /crane.tar.gz \ 
    https://github.com/google/go-containerregistry/releases/download/v0.1.1/go-containerregistry_Linux_x86_64.tar.gz && \
    tar -xvzf /crane.tar.gz crane -C /kaniko && \
-    rm crane.tar.gz
+    rm /crane.tar.gz

 COPY entrypoint.sh /
 COPY --from=certs /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/ca-certificates.crt
--- a/entrypoint.sh
+++ b/entrypoint.sh
@ -10,10 +10,13 @@ export TAG=${TAG#$INPUT_STRIP_TAG_PREFIX}
 export USERNAME=${INPUT_USERNAME:-$GITHUB_ACTOR}
 export PASSWORD=${INPUT_PASSWORD:-$GITHUB_TOKEN}
 export REPOSITORY=$IMAGE
-export IMAGE_LATEST=${INPUT_TAG_WITH_LATEST:+"$IMAGE:latest"}
 export IMAGE=$IMAGE:$TAG
 export CONTEXT_PATH=${INPUT_PATH}

+if [[ "$INPUT_TAG_WITH_LATEST" == "true" ]]; then
+    export IMAGE_LATEST="$IMAGE:latest"
+fi
+
 function ensure() {
    if [ -z "${1}" ]; then
        echo >&2 "Unable to find the ${2} variable. Did you set with.${2}?"
@ -61,7 +64,7 @@ export DOCKERFILE="--dockerfile $CONTEXT_PATH/${INPUT_BUILD_FILE:-Dockerfile}"
 export TARGET=${INPUT_TARGET:+"--target=$INPUT_TARGET"}

 if [ ! -z $INPUT_SKIP_UNCHANGED_DIGEST ]; then
-    export DESTINATION="--digest-file digest --tarPath image.tar --destination $IMAGE"
+    export DESTINATION="--digest-file digest --no-push --tarPath image.tar --destination $IMAGE"
 else
    export DESTINATION="--destination $IMAGE"
    if [ ! -z $IMAGE_LATEST ]; then
@ -89,7 +92,7 @@ if [ ! -z $INPUT_SKIP_UNCHANGED_DIGEST ]; then
    export DIGEST=$(cat digest)

    if [ "$REGISTRY" == "docker.pkg.github.com" ]; then
-        wget -q -O manifest --header "Authorization: Basic $(echo -n $USERNAME:$PASSWORD | base64)" https://docker.pkg.github.com/v2/$REPOSITORY/manifests/latest || true
+        wget -q -O manifest --header "Authorization: Basic $(echo -n $USERNAME:$PASSWORD | base64 | tr -d \\n)" https://docker.pkg.github.com/v2/$REPOSITORY/manifests/latest || true
        export REMOTE="sha256:$(cat manifest | sha256sum | awk '{ print $1 }')"
    else
        export REMOTE=$(reg digest -u $USERNAME -p $PASSWORD $REGISTRY/$REPOSITORY | tail -1)
Author	SHA1	Message	Date
Julien Semaan	8e9a423400	fix: tag with latest only when its config is true	2022-01-24 10:46:25 +01:00
Alex Viscreanu	f16a14fc0f	fix(ci): fetch all necessary commits for commitsar and release notary	2022-01-24 10:45:57 +01:00
Renovate Bot	8bd3e02fd2	chore(deps): update actions/checkout action to v2	2022-01-24 10:13:55 +01:00
Renovate Bot	571e42aef3	chore(deps): update aevea/release-notary docker digest to 8b26ced	2022-01-24 10:11:09 +01:00
Renovate Bot	e846d42497	chore(deps): update aevea/commitsar docker digest to b77adeb	2022-01-24 10:04:50 +01:00
Renovate Bot	b7f0f661e3	chore(deps): update aevea/release-notary docker digest to fad8346	2022-01-24 10:04:40 +01:00
Dmitry Tsoy	7033a0543d	fix: long base64 string may contain new-line if the base64 string has more than 76 characters, it is wrapped with \n	2022-01-24 10:03:08 +01:00
Doron Somech	e03153c634	fix: don't push image when skip_unchanged_digest is set Kaniko default behavior changed, `--tarPath` alone is not enough to skip the push to registry, `--no-push` is now required as well. Reference: GoogleContainerTools/kaniko#1503	2021-09-21 11:52:28 +02:00
Alex Viscreanu	49888d43ab	fix(build): delete crane tarfile using absolute path	2021-02-17 10:54:13 +01:00
Renovate Bot	418284a2f2	chore(deps): update aevea/commitsar docker digest to caf5539	2020-09-14 11:17:39 +02:00
Renovate Bot	5be93ca286	chore(deps): pin docker digests	2020-09-04 11:49:49 +02:00