diff options
| author | tranch <tranch.xiao@gmail.com> | 2026-07-09 18:21:37 +0800 |
|---|---|---|
| committer | tranch <tranch.xiao@gmail.com> | 2026-07-09 18:21:37 +0800 |
| commit | 75f30511833eb72dfe24fb4e2946aab65571173c (patch) | |
| tree | ed78f8c3489704abb3c0de49f706587ff4efccd9 /.github/workflows/build.yml | |
| parent | 61a3dd784f1bb36b89644e158c4e9d75da736935 (diff) | |
| download | AeroCore-OS-75f30511833eb72dfe24fb4e2946aab65571173c.tar.gz AeroCore-OS-75f30511833eb72dfe24fb4e2946aab65571173c.zip | |
Promote ACR images manually
Remove push-triggered builds and split ACR publishing out of the build workflow.
Add a manual promote-acr workflow that copies an existing GHCR tag to ACR, supports explicit target tags, validates the required ACR configuration, and signs the promoted ACR digest.
Verification: parsed both workflow YAML files and checked embedded run blocks with bash -n.
Diffstat (limited to '.github/workflows/build.yml')
| -rw-r--r-- | .github/workflows/build.yml | 25 |
1 files changed, 0 insertions, 25 deletions
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index b822ac6..56f8da9 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -6,11 +6,6 @@ on: - main schedule: - cron: '05 10 * * *' # 10:05am UTC everyday - push: - branches: - - main - paths-ignore: - - '**/README.md' workflow_dispatch: env: @@ -163,23 +158,3 @@ jobs: DIGEST: ${{ steps.push-image.outputs.digest }} run: | cosign sign -y --key env://COSIGN_PRIVATE_KEY ${IMAGE_REGISTRY}/${IMAGE_NAME}@${DIGEST} - - - name: Push To ACR - if: | - github.event_name != 'pull_request' && - github.ref == format('refs/heads/{0}', github.event.repository.default_branch) && - vars.ACR_REGISTRY != '' && - vars.ACR_NAMESPACE != '' - env: - ACR_REGISTRY: ${{ vars.ACR_REGISTRY }} - ACR_NAMESPACE: ${{ vars.ACR_NAMESPACE }} - ACR_USERNAME: ${{ secrets.ACR_USERNAME }} - ACR_PASSWORD: ${{ secrets.ACR_PASSWORD }} - ALIAS_TAGS: ${{ steps.gen-build-tags.outputs.alias_tags }} - run: | - set -euo pipefail - echo "$ACR_PASSWORD" | sudo -E podman login "$ACR_REGISTRY" -u "$ACR_USERNAME" --password-stdin - - for tag in ${ALIAS_TAGS}; do - sudo -E podman push "${IMAGE_NAME}:${tag}" "${ACR_REGISTRY}/${ACR_NAMESPACE}/${IMAGE_NAME}:${tag}" - done |