fix(ci): make release gates DIND-compatible
Managed validation / full (pull_request) Successful in 49s
GeoIntel release gates / Python and npm vulnerability policy (pull_request) Successful in 1m30s
GeoIntel release gates / Compile, test, contracts and builds (pull_request) Failing after 2m27s
GeoIntel release gates / GIS image, SBOM and container scan (pull_request) Successful in 4m28s

This commit is contained in:
NuklearRabbit
2026-08-29 00:27:17 +02:00
parent 1184312bcd
commit 65f524d10b
4 changed files with 37 additions and 10 deletions
+6
View File
@@ -120,6 +120,8 @@ jobs:
name: GIS image, SBOM and container scan
runs-on: ubuntu-latest
timeout-minutes: 60
env:
GEOINTEL_IMAGE_ARCHIVE: artifacts/geointel-image.tar
steps:
- uses: actions/checkout@v4
- name: Build non-AI release image
@@ -136,6 +138,7 @@ jobs:
-t "geointel-ci:$RELEASE_SHA-gis" \
.
docker image inspect "geointel-ci:$RELEASE_SHA-gis" > artifacts/image-inspect.json
docker save "geointel-ci:$RELEASE_SHA-gis" --output "$GEOINTEL_IMAGE_ARCHIVE"
- name: Generate SPDX SBOM
env:
RELEASE_SHA: ${{ gitea.sha }}
@@ -144,6 +147,9 @@ jobs:
env:
RELEASE_SHA: ${{ gitea.sha }}
run: bash scripts/scan_container_image.sh "geointel-ci:$RELEASE_SHA-gis"
- name: Remove transient image archive
if: always()
run: rm -f "$GEOINTEL_IMAGE_ARCHIVE"
- name: Publish container evidence
if: always()
uses: actions/upload-artifact@v3.2.2-node20