ci: apply zizmor recommendations (#293) #1431
chglci.yaml
on: push
build
/
build image
1m 33s
lint
/
MegaLinter
0s
lint
/
dependency review
0s
lint
/
validate gradle wrapper
0s
lint
/
verify Dockerfile base image signature
0s
lint
/
zizmor
31s
Matrix: lint / CodeQL analyze
build
/
sign image
14s
build
/
attest trivy vulnerability report
11s
build
/
upload slsa attestations to release assets
0s
copy ghcr.io image to DockerHub
4s
release
/
release
41s
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
chgl~fhir-server-exporter~WUOU27.dockerbuild
|
53.8 KB |
|
|
chgl~fhir-server-exporter~YICZKD.dockerbuild
|
63.5 KB |
|
|
ghcr.io-chgl-fhir-server-exporter-master-trivy-attestation
|
8.47 KB |
|