Skip to content

Commit 41fa501

Browse files
mjshasthamjshastha
authored
Merge branch 'master' into update-plugin-links-v0.232.0
2 parents d512717 + 8d16f36 commit 41fa501

9 files changed

Lines changed: 361 additions & 132 deletions

File tree

‎.DS_Store‎

6 KB
Binary file not shown.

‎.github/.DS_Store‎

6 KB
Binary file not shown.

‎.github/plugin_template.yaml‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,9 @@
11
name: "aqua"
22
repository: github.com/aquasecurity/trivy-plugin-aqua
33
version: "PLACEHOLDERVERSION"
4-
usage: trivy aqua <srcPath>
5-
description: A Trivy plugin that sends results to Aqua.
4+
maintainer: aquasecurity
5+
summary: Send results to Aqua Security
6+
description: A plugin for integration with Aqua Security SaaS platform
67
platforms:
78
- selector: # optional
89
os: linux

‎.github/workflows/create-pr.yml‎

Lines changed: 6 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -8,32 +8,21 @@ on:
88
jobs:
99
build:
1010
name: Build
11-
runs-on: ubuntu-latest
11+
runs-on: arc-runner-set
12+
permissions:
13+
contents: write
14+
pull-requests: write
1215
steps:
1316
- uses: actions/checkout@v3
1417
- name: Update plugin Links
1518
run: |
1619
sed -e "s/PLACEHOLDERVERSION/${{github.ref_name}}/g" .github/plugin_template.yaml > plugin.yaml
1720
- name: Create Pull Request
1821
id: cpr
19-
uses: peter-evans/create-pull-request@v4
22+
uses: peter-evans/create-pull-request@271a8d0340265f705b14b6d32b9829c1cb33d45e # 7.0.8
2023
with:
21-
token: ${{ secrets.PR_CREATION_TOKEN }}
2224
branch: "update-plugin-links-${{github.ref_name}}"
23-
title: "Update Plugin Artifacts Links for ${{github.ref_name}}"
2425
base: master
26+
title: "Update Plugin Artifacts Links for ${{github.ref_name}}"
2527
add-paths: |
2628
plugin.yaml
27-
- name: Send Slack message (Workflow)
28-
id: slack
29-
uses: slackapi/slack-github-action@v1.21.0
30-
with:
31-
payload: |
32-
{
33-
"link": "${{ steps.cpr.outputs.pull-request-url }}"
34-
}
35-
env:
36-
SLACK_WEBHOOK_URL: ${{ secrets.CODE_TEAM_SLACK_WEBHOOK }}
37-
- name: Send Teams message
38-
run: |
39-
curl -H "Content-Type: application/json" -d '{"text": "New pull request opened: '${{ steps.cpr.outputs.pull-request-url }}'"}' ${{ secrets.TEAMS_WEBHOOK_URL }}

‎.github/workflows/pr-merged.yml‎

Lines changed: 105 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
name: update docker images
22
on:
33
pull_request:
4-
branches:
4+
branches:
55
- master
66
types:
77
- closed
@@ -10,47 +10,109 @@ on:
1010
- README-dockerhub.md
1111

1212
jobs:
13-
Update-images:
13+
update-latest-version:
1414
if: github.event.pull_request.merged == true
15-
runs-on: ubuntu-latest
15+
runs-on: arc-runner-set
1616
steps:
17-
- name: Checkout target branch
18-
uses: actions/checkout@v2
19-
with:
20-
ref: ${{ github.event.pull_request.base.ref }}
21-
- name: Login to docker.io registry
22-
uses: docker/login-action@v2
23-
with:
24-
username: ${{ secrets.ARGON_DOCKERHUB_USER }}
25-
password: ${{ secrets.ARGON_DOCKERHUB_TOKEN }}
26-
- name: Extract version
27-
run: "echo \"new_version=$(grep 'version: ' plugin.yaml | cut -d '\"' -f2)\" >> $GITHUB_ENV"
28-
- name: Change image versions to latest
29-
run: |
30-
docker pull aquasec/aqua-scanner:${{ env.new_version }}-amd64
31-
docker tag aquasec/aqua-scanner:${{ env.new_version }}-amd64 aquasec/aqua-scanner:latest-amd64
32-
docker push aquasec/aqua-scanner:latest-amd64
33-
34-
docker pull aquasec/aqua-scanner:${{ env.new_version }}-arm64
35-
docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64 aquasec/aqua-scanner:latest-arm64
36-
docker push aquasec/aqua-scanner:latest-arm64
37-
38-
#docker pull aquasec/aqua-scanner:${{ env.new_version }}-amd64-limited
39-
#docker tag aquasec/aqua-scanner:${{ env.new_version }}-amd64-limited aquasec/aqua-scanner:latest-amd64-limited
40-
#docker push aquasec/aqua-scanner:latest-amd64-limited
41-
42-
#docker pull aquasec/aqua-scanner:${{ env.new_version }}-arm64-limited
43-
#docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64-limited aquasec/aqua-scanner:latest-arm64-limited
44-
#docker push aquasec/aqua-scanner:latest-arm64-limited
45-
docker manifest create aquasec/aqua-scanner:latest aquasec/aqua-scanner:latest-amd64 aquasec/aqua-scanner:latest-arm64
46-
docker manifest push aquasec/aqua-scanner:latest
47-
48-
#docker manifest create aquasec/aqua-scanner:latest-limited aquasec/aqua-scanner:latest-amd64-limited aquasec/aqua-scanner:latest-arm64-limited
49-
#docker manifest push aquasec/aqua-scanner:latest-limited
50-
- name: DockerHub description update
51-
uses: peter-evans/dockerhub-description@v3
52-
with:
53-
username: ${{ secrets.ARGON_DOCKERHUB_USER }}
54-
password: ${{ secrets.ARGON_DOCKERHUB_TOKEN }}
55-
repository: aquasec/aqua-scanner
56-
readme-filepath: ./README-dockerhub.md
17+
- name: Generate aqua-pr-bot App token
18+
id: pr_bot_token
19+
uses: actions/create-github-app-token@v2
20+
with:
21+
app-id: ${{ secrets.AQUA_PR_BOT_APP_ID }}
22+
private-key: ${{ secrets.AQUA_PR_BOT_PRIVATE_KEY }}
23+
owner: aquasecurity
24+
repositories: trivy-plugin-aqua
25+
26+
- name: Checkout target branch
27+
uses: actions/checkout@v2
28+
with:
29+
ref: ${{ github.event.pull_request.base.ref }}
30+
- name: Login to docker.io registry
31+
uses: docker/login-action@v3
32+
with:
33+
username: ${{ secrets.ARGON_DOCKERHUB_USER }}
34+
password: ${{ secrets.ARGON_DOCKERHUB_TOKEN }}
35+
- name: login to Aqua Container Registry
36+
uses: docker/login-action@v3
37+
with:
38+
registry: ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}
39+
username: ${{ secrets.AQUASEC_ACR_USERNAME }}
40+
password: ${{ secrets.AQUASEC_ACR_PASSWORD }}
41+
- name: Extract version
42+
run: 'echo "new_version=$(grep ''version: '' plugin.yaml | cut -d ''"'' -f2)" >> $GITHUB_ENV'
43+
- name: Change image versions to latest
44+
run: |
45+
# amd
46+
docker pull aquasec/aqua-scanner:${{ env.new_version }}-amd64
47+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-amd64 aquasec/aqua-scanner:latest-amd64
48+
docker push aquasec/aqua-scanner:latest-amd64
49+
# Handle transfer to aqua reg
50+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-amd64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-amd64
51+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-amd64
52+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-amd64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64
53+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64
54+
55+
# arm
56+
docker pull aquasec/aqua-scanner:${{ env.new_version }}-arm64
57+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64 aquasec/aqua-scanner:latest-arm64
58+
docker push aquasec/aqua-scanner:latest-arm64
59+
# Handle transfer to aqua reg
60+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-arm64
61+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-arm64
62+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64
63+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64
64+
65+
# amd limited
66+
docker pull aquasec/aqua-scanner:${{ env.new_version }}-amd64-limited
67+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-amd64-limited aquasec/aqua-scanner:latest-amd64-limited
68+
docker push aquasec/aqua-scanner:latest-amd64-limited
69+
# Handle transfer to aqua reg
70+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-amd64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-amd64-limited
71+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-amd64-limited
72+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-amd64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64-limited
73+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64-limited
74+
75+
# arm limited
76+
docker pull aquasec/aqua-scanner:${{ env.new_version }}-arm64-limited
77+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64-limited aquasec/aqua-scanner:latest-arm64-limited
78+
docker push aquasec/aqua-scanner:latest-arm64-limited
79+
# Handle transfer to aqua reg
80+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-arm64-limited
81+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-arm64-limited
82+
docker tag aquasec/aqua-scanner:${{ env.new_version }}-arm64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64-limited
83+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64-limited
84+
85+
# Multiarch For Version (Aqua reg)
86+
docker manifest create ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }} ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-amd64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-arm64
87+
docker manifest push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}
88+
89+
# Multiarch For Version Limited (Aqua reg)
90+
docker manifest create ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-amd64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-arm64-limited
91+
docker manifest push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ env.new_version }}-limited
92+
93+
# Multiarch Latest
94+
docker manifest create aquasec/aqua-scanner:latest aquasec/aqua-scanner:latest-amd64 aquasec/aqua-scanner:latest-arm64
95+
docker manifest push aquasec/aqua-scanner:latest
96+
# Handle transfer to aqua reg
97+
docker manifest create ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64
98+
docker manifest push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest
99+
100+
# Multiarch Latest Limited
101+
docker manifest create aquasec/aqua-scanner:latest-limited aquasec/aqua-scanner:latest-amd64-limited aquasec/aqua-scanner:latest-arm64-limited
102+
docker manifest push aquasec/aqua-scanner:latest-limited
103+
# Handle transfer to aqua reg
104+
docker manifest create ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64-limited
105+
docker manifest push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-limited
106+
- name: DockerHub description update
107+
uses: peter-evans/dockerhub-description@dc67fad7001ef9e8e3c124cb7a64e16d0a63d864 # 3.4.2
108+
with:
109+
username: ${{ secrets.ARGON_DOCKERHUB_USER }}
110+
password: ${{ secrets.ARGON_DOCKERHUB_TOKEN }}
111+
repository: aquasec/aqua-scanner
112+
readme-filepath: ./README-dockerhub.md
113+
- name: Update tag to latest
114+
uses: richardsimko/update-tag@e173a8ef8f54ab526a91dad6139a25efed62424c # v1.0.11
115+
with:
116+
tag_name: ${{ env.new_version }}
117+
env:
118+
GITHUB_TOKEN: ${{ steps.pr_bot_token.outputs.token }}

‎.github/workflows/pr.yml‎

Lines changed: 52 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,11 +6,61 @@ on:
66
jobs:
77
build:
88
name: testing PR build
9-
runs-on: ubuntu-latest
9+
runs-on: arc-runner-set
1010

1111
steps:
1212
- uses: actions/checkout@v3
1313
with:
1414
fetch-depth: 0
1515
- name: Run tests
16-
run: make test
16+
run: |
17+
if cat ./plugin.yaml | grep uri: | cut -c 10-200 | xargs -n 1 curl -o /dev/null --silent --head --write-out '%{http_code}\n' -L | grep -q "404"; then
18+
echo 'Artifacts links are broken'
19+
exit 1
20+
else
21+
echo 'Artifacts links are valid'
22+
fi
23+
24+
validate_aqua_pr_bot_auth:
25+
name: validate aqua-pr-bot token
26+
runs-on: arc-runner-set
27+
steps:
28+
- name: Generate aqua-pr-bot App token
29+
id: pr_bot_token
30+
uses: actions/create-github-app-token@v2
31+
with:
32+
app-id: ${{ secrets.AQUA_PR_BOT_APP_ID }}
33+
private-key: ${{ secrets.AQUA_PR_BOT_PRIVATE_KEY }}
34+
owner: aquasecurity
35+
repositories: trivy-plugin-aqua
36+
37+
- name: Validate PR bot API access (read-only)
38+
env:
39+
GH_TOKEN: ${{ steps.pr_bot_token.outputs.token }}
40+
run: |
41+
curl -sf -H "Authorization: Bearer $GH_TOKEN" \
42+
https://api.github.com/repos/aquasecurity/trivy-plugin-aqua | jq -r .full_name
43+
curl -sf -H "Authorization: Bearer $GH_TOKEN" \
44+
"https://api.github.com/repos/aquasecurity/trivy-plugin-aqua/pulls?per_page=1" | jq length
45+
46+
validate_aqua_release_publisher_auth:
47+
name: validate aqua-release-publisher token
48+
runs-on: arc-runner-set
49+
steps:
50+
- name: Generate aqua-release-publisher App token
51+
id: release_token
52+
uses: actions/create-github-app-token@v2
53+
with:
54+
app-id: ${{ secrets.AQUA_RELEASE_PUBLISHER_APP_ID }}
55+
private-key: ${{ secrets.AQUA_RELEASE_PUBLISHER_PRIVATE_KEY }}
56+
owner: aquasecurity
57+
repositories: trivy-plugin-aqua
58+
59+
- name: Validate release publisher API access (read-only)
60+
env:
61+
GH_TOKEN: ${{ steps.release_token.outputs.token }}
62+
run: |
63+
curl -sf -H "Authorization: Bearer $GH_TOKEN" \
64+
https://api.github.com/repos/aquasecurity/trivy-plugin-aqua | jq -r .full_name
65+
curl -sf -H "Authorization: Bearer $GH_TOKEN" \
66+
"https://api.github.com/repos/aquasecurity/trivy-plugin-aqua/releases?per_page=1" | jq length

‎.github/workflows/retag-latest-version.yml‎

Lines changed: 86 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,86 @@
1+
name: Re-tag latest version
2+
on:
3+
workflow_dispatch:
4+
inputs:
5+
version:
6+
description: "Version to re-tag"
7+
required: true
8+
9+
jobs:
10+
Update-images:
11+
runs-on: arc-runner-set
12+
steps:
13+
- name: Login to docker.io registry
14+
uses: docker/login-action@v3
15+
with:
16+
username: ${{ secrets.ARGON_DOCKERHUB_USER }}
17+
password: ${{ secrets.ARGON_DOCKERHUB_TOKEN }}
18+
- name: login to Aqua Container Registry
19+
uses: docker/login-action@v3
20+
with:
21+
registry: ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}
22+
username: ${{ secrets.AQUASEC_ACR_USERNAME }}
23+
password: ${{ secrets.AQUASEC_ACR_PASSWORD }}
24+
- name: Change image versions to latest
25+
run: |
26+
# amd
27+
docker pull aquasec/aqua-scanner:${{ inputs.version }}-amd64
28+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-amd64 aquasec/aqua-scanner:latest-amd64
29+
docker push aquasec/aqua-scanner:latest-amd64
30+
# Handle transfer to aqua reg
31+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-amd64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-amd64
32+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-amd64
33+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-amd64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64
34+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64
35+
36+
# arm
37+
docker pull aquasec/aqua-scanner:${{ inputs.version }}-arm64
38+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-arm64 aquasec/aqua-scanner:latest-arm64
39+
docker push aquasec/aqua-scanner:latest-arm64
40+
# Handle transfer to aqua reg
41+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-arm64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-arm64
42+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-arm64
43+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-arm64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64
44+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64
45+
46+
# amd limited
47+
docker pull aquasec/aqua-scanner:${{ inputs.version }}-amd64-limited
48+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-amd64-limited aquasec/aqua-scanner:latest-amd64-limited
49+
docker push aquasec/aqua-scanner:latest-amd64-limited
50+
# Handle transfer to aqua reg
51+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-amd64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-amd64-limited
52+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-amd64-limited
53+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-amd64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64-limited
54+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64-limited
55+
56+
# arm limited
57+
docker pull aquasec/aqua-scanner:${{ inputs.version }}-arm64-limited
58+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-arm64-limited aquasec/aqua-scanner:latest-arm64-limited
59+
docker push aquasec/aqua-scanner:latest-arm64-limited
60+
# Handle transfer to aqua reg
61+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-arm64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-arm64-limited
62+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-arm64-limited
63+
docker tag aquasec/aqua-scanner:${{ inputs.version }}-arm64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64-limited
64+
docker push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64-limited
65+
66+
# Multiarch For Version (Aqua reg)
67+
docker manifest create ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }} ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-amd64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-arm64
68+
docker manifest push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}
69+
70+
# Multiarch For Version Limited (Aqua reg)
71+
docker manifest create ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-amd64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-arm64-limited
72+
docker manifest push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:${{ inputs.version }}-limited
73+
74+
# Multiarch Latest
75+
docker manifest create aquasec/aqua-scanner:latest aquasec/aqua-scanner:latest-amd64 aquasec/aqua-scanner:latest-arm64
76+
docker manifest push aquasec/aqua-scanner:latest
77+
# Handle transfer to aqua reg
78+
docker manifest create ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64 ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64
79+
docker manifest push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest
80+
81+
# Multiarch Latest Limited
82+
docker manifest create aquasec/aqua-scanner:latest-limited aquasec/aqua-scanner:latest-amd64-limited aquasec/aqua-scanner:latest-arm64-limited
83+
docker manifest push aquasec/aqua-scanner:latest-limited
84+
# Handle transfer to aqua reg
85+
docker manifest create ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-amd64-limited ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-arm64-limited
86+
docker manifest push ${{ secrets.AQUASEC_ACR_REGISTRY_NAME }}/aqua-scanner:latest-limited

0 commit comments

Comments
 (0)