Skip to content

Commit

Permalink
ci: use depot project variable
Browse files Browse the repository at this point in the history
Signed-off-by: Mark Sagi-Kazar <[email protected]>
  • Loading branch information
sagikazarmark committed Aug 15, 2024
1 parent cca3875 commit 6d4c503
Showing 1 changed file with 6 additions and 6 deletions.
12 changes: 6 additions & 6 deletions .github/workflows/artifacts.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -87,7 +87,7 @@ jobs:
labels: ${{ steps.meta.outputs.labels }}
push: ${{ inputs.publish }}
save: true
project: mx1q1j4nzh
project: ${{ vars.DEPOT_PROJECT }}

- name: Set image ref
id: image-ref
Expand All @@ -96,14 +96,14 @@ jobs:
- name: Retrieve pull token
id: pull-token
run: |
PULL_TOKEN="$(depot pull-token --project mx1q1j4nzh)"
PULL_TOKEN="$(depot pull-token --project ${{ vars.DEPOT_PROJECT }})"
echo "token=$PULL_TOKEN" >> "$GITHUB_OUTPUT"
echo "::add-mask::$PULL_TOKEN"
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # 0.24.0
with:
image-ref: registry.depot.dev/mx1q1j4nzh:${{ steps.build.outputs.build-id }}
image-ref: registry.depot.dev/${{ vars.DEPOT_PROJECT }}:${{ steps.build.outputs.build-id }}
format: sarif
output: trivy-results.sarif
env:
Expand Down Expand Up @@ -184,7 +184,7 @@ jobs:
labels: ${{ steps.meta.outputs.labels }}
push: ${{ inputs.publish }}
save: true
project: mx1q1j4nzh
project: ${{ vars.DEPOT_PROJECT }}

- name: Set image ref
id: image-ref
Expand All @@ -193,14 +193,14 @@ jobs:
- name: Retrieve pull token
id: pull-token
run: |
PULL_TOKEN="$(depot pull-token --project mx1q1j4nzh)"
PULL_TOKEN="$(depot pull-token --project ${{ vars.DEPOT_PROJECT }})"
echo "token=$PULL_TOKEN" >> "$GITHUB_OUTPUT"
echo "::add-mask::$PULL_TOKEN"
- name: Run Trivy vulnerability scanner
uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # 0.24.0
with:
image-ref: registry.depot.dev/mx1q1j4nzh:${{ steps.build.outputs.build-id }}
image-ref: registry.depot.dev/${{ vars.DEPOT_PROJECT }}:${{ steps.build.outputs.build-id }}
format: sarif
output: trivy-results.sarif
env:
Expand Down

0 comments on commit 6d4c503

Please sign in to comment.