Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[DT-1122] Apply zizmor suggestions #1733

Open
wants to merge 1 commit into
base: develop
Choose a base branch
from

Conversation

fboulnois
Copy link
Contributor

Addresses

https://broadworkbench.atlassian.net/browse/DT-1122

Summary

  • Do not persist credentials if not needed
  • Use shell variable expansion instead of template expansion

@fboulnois fboulnois requested a review from a team as a code owner January 8, 2025 20:44
@fboulnois fboulnois requested review from pshapiro4broad and snf2ye and removed request for a team January 8, 2025 20:44
Copy link

sonarqubecloud bot commented Jan 8, 2025

Copy link

cypress bot commented Jan 9, 2025

jade-data-repo-ui    Run #3922

Run Properties:  status check passed Passed #3922  •  git commit 2536be4a92 ℹ️: Merge aea9c4d0769c8479f5d40a28c0b62877a5f07108 into 79c0423d9cfcafed88655352e6c8...
Project jade-data-repo-ui
Branch Review fb-dt-1122-apply-zizmor-fixes
Run status status check passed Passed #3922
Run duration 02m 51s
Commit git commit 2536be4a92 ℹ️: Merge aea9c4d0769c8479f5d40a28c0b62877a5f07108 into 79c0423d9cfcafed88655352e6c8...
Committer fboulnois
View all properties for this run ↗︎

Test results
Tests that failed  Failures 0
Tests that were flaky  Flaky 0
Tests that did not run due to a developer annotating a test with .skip  Pending 0
Tests that did not run due to a failure in a mocha hook  Skipped 0
Tests that passed  Passing 17
View all changes introduced in this branch ↗︎

Comment on lines -72 to +89
docker build -t gcr.io/${{ env.gcr_google_project }}/jade-data-repo-ui:${GCR_TAG} --build-arg CACHEBUST=$(date +%s) .
docker build -t gcr.io/${gcr_google_project}/jade-data-repo-ui:${GCR_TAG} --build-arg CACHEBUST=$(date +%s) .
# Push the Docker image to Google Container Registry
- name: Publish and tag new docker container to GCR
run: |
gcloud auth activate-service-account --key-file jade-dev-account.json
gcloud auth configure-docker --quiet
docker push gcr.io/${{ env.gcr_google_project }}/jade-data-repo-ui:${GCR_TAG}
docker push gcr.io/${gcr_google_project}/jade-data-repo-ui:${GCR_TAG}
gcloud container images \
add-tag \
gcr.io/${{ env.gcr_google_project }}/jade-data-repo-ui:"${GCR_TAG}" \
gcr.io/${{ env.gcr_google_project }}/jade-data-repo-ui:"${{ steps.uiprevioustag.outputs.tag }}" --quiet
gcr.io/${gcr_google_project}/jade-data-repo-ui:"${GCR_TAG}" \
gcr.io/${gcr_google_project}/jade-data-repo-ui:"${PREV_TAG}" --quiet
gcloud container images \
add-tag \
gcr.io/${{ env.gcr_google_project }}/jade-data-repo-ui:"${GCR_TAG}" \
gcr.io/${{ env.gcr_google_project }}/jade-data-repo-ui:"${GCR_TAG}-develop" --quiet
gcr.io/${gcr_google_project}/jade-data-repo-ui:"${GCR_TAG}" \
gcr.io/${gcr_google_project}/jade-data-repo-ui:"${GCR_TAG}-develop" --quiet
env:
PREV_TAG: ${{ steps.uiprevioustag.outputs.tag }}
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Were you able to test these changes? I'm a little worried that it won't pick up on these variables with the changes - I've found it to be really picky in the past.
I think I've been able to test a subset of this action by commenting out the bumperstep, helm_tag_bump an cherry_pick_image_to_production_gcr tasks and then kicking off the run on your branch.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants