tet

.gitea/workflows/build_image.yaml

@@ -9,16 +9,25 @@ on: [push]
   #       default: 'World'
   #       type: string
 jobs:
-  build-image:
+  build:
+
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
+      packages: write
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+      id-token: write
+
     steps:
-      - name: Print to Log
+
-        id: print-to-log
+      # - name: Print to Log
-        env:
+      #   id: print-to-log
-          REGISTRY: registry.jingoh.fr
+      #   env:
-        uses: https://github.com/actions/hello-world-docker-action@main
+      #     REGISTRY: registry.jingoh.fr
-        with:
+      #   uses: https://github.com/actions/hello-world-docker-action@main
-          who-to-greet: ${{ env.REGISTRY }}
+      #   with:
+      #     who-to-greet: ${{ env.REGISTRY }}
 
       - name: Checkout private tools
         uses: https://github.com/actions/checkout@v3
@@ -30,18 +39,18 @@ jobs:
           token: ${{ secrets.GH_PAT }} # `GH_PAT` is a secret that contains your PAT
           ssh-known-hosts: ${{ secrets.SSH_KNOWN_GITEA }}
 
-#       # # Install the cosign tool except on PR
+      # # Install the cosign tool except on PR
-#       # # https://github.com/sigstore/cosign-installer
+      # # https://github.com/sigstore/cosign-installer
-#       - name: Install cosign
+      - name: Install cosign
-#         #if: gitea.event_name != 'pull_request'
+        #if: gitea.event_name != 'pull_request'
-#         uses: https://github.com/sigstore/cosign-installer@v2.6.0 #v2.6.0
+        uses: https://github.com/sigstore/cosign-installer@v2.6.0 #v2.6.0
-#         with:
+        with:
-#           cosign-release: 'v1.11.0'
+          cosign-release: 'v1.11.0'
 
 
       # Workaround: https://github.com/docker/build-push-action/issues/461
       - name: Setup Docker buildx
-        uses: https://github.com/docker/setup-buildx-action@v2
+        uses: https://github.com/docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
 
       # Login against a Docker registry except on PR
       # https://github.com/docker/login-action

Dockerfile

@@ -1,3 +1,5 @@
+# Exemple https://github.com/actions/starter-workflows/blob/main/ci/docker-publish.yml
+
 # Container image that runs your code
 FROM alpine:3.10