Skip to content
This repository was archived by the owner on Feb 11, 2025. It is now read-only.

Commit dc94496

Browse files
eksrhaeksrha
authored
Merge pull request #15 from fullstack-devops/bugfix/scanning-and-runner-update
container scanning and runner update to 2.291.1
2 parents 975dccf + 327e954 commit dc94496

File tree

3 files changed

+59
-11
lines changed

3 files changed

+59
-11
lines changed

‎.github/workflows/anchore.yml‎

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
# This workflow uses actions that are not certified by GitHub.
2+
# They are provided by a third-party and are governed by
3+
# separate terms of service, privacy policy, and support
4+
# documentation.
5+
6+
# This workflow checks out code, builds an image, performs a container image
7+
# vulnerability scan with Anchore's Grype tool, and integrates the results with GitHub Advanced Security
8+
# code scanning feature. For more information on the Anchore scan action usage
9+
# and parameters, see https://github.com/anchore/scan-action. For more
10+
# information on Anchore's container image scanning tool Grype, see
11+
# https://github.com/anchore/grype
12+
name: Anchore Container Scan
13+
14+
on:
15+
push:
16+
branches: [ main ]
17+
pull_request:
18+
branches: [ main ]
19+
schedule:
20+
- cron: '45 5 * * 1'
21+
22+
permissions:
23+
contents: read
24+
25+
jobs:
26+
Anchore-Build-Scan:
27+
permissions:
28+
contents: read # for actions/checkout to fetch code
29+
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
30+
runs-on: ubuntu-latest
31+
steps:
32+
- name: Checkout the code
33+
uses: actions/checkout@v3
34+
35+
- name: Scan current project
36+
id: scan
37+
uses: anchore/scan-action@v3
38+
with:
39+
path: "."
40+
acs-report-enable: true
41+
42+
- name: Upload Anchore Scan Report
43+
uses: github/codeql-action/upload-sarif@v2
44+
with:
45+
sarif_file: ${{ steps.scan.outputs.sarif }}

‎README.md‎

Lines changed: 13 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,25 @@
1-
# github-runner-base
1+
[![Create Release](https://github.com/fullstack-devops/github-actions-runner/actions/workflows/create-release.yml/badge.svg)](https://github.com/fullstack-devops/github-actions-runner/actions/workflows/create-release.yml)
2+
[![Anchore Container Scan](https://github.com/fullstack-devops/github-actions-runner/actions/workflows/anchore.yml/badge.svg)](https://github.com/fullstack-devops/github-actions-runner/actions/workflows/anchore.yml)
3+
4+
# GitHub Actions Custom Runner
25
Container images with Github Actions Runner. Different flavored images with preinstalled tools and software for builds with limited internet access and non root privileges.
36

47
Ideal for building software in enterprise environments of large organizations that often restrict internet access.
58
Software builds can be built there using a [Nexus Repository](https://de.sonatype.com/products/repository-oss) or [JFrog Artifactory](https://jfrog.com/de/artifactory/)
69

710
Support: If you need help or a feature just open an issue!
811

9-
Package / Images: ghcr.io/fullstack-devops/github-actions-runner
12+
Package / Images: `ghcr.io/fullstack-devops/github-actions-runner`
1013

1114
Available Tags:
12-
| Name (tag) | Installed Tools/ Software | Description |
13-
|-------------------------|-----------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------|
14-
| `latest-base` | libffi-dev, libicu-dev, build-essential, libssl-dev, ca-certificates, jq, sed, grep, git, curl, wget, zip | Base runner with nothing fancy installed <br> [Dockerfile](images/base/Dockerfile) |
15-
| `latest-kaniko-sidecar` | kaniko | Sidecar used by other runner images to build containers without root privileges |
16-
| `latest-ansible-k8s` | base-image + ansible, helm, kubectl, skopeo | Runner specialized for automated k8s deployments via ansible <br> For more Details see [Dockerfile](images/ansible-k8s/Dockerfile) |
17-
| `latest-fullstacked` | base-image + maven, openjdk-11, nodejs, go, yarn, angular/cli, helm | Runner with a bunch of tools to build your hole application<br> For more Details see [Dockerfile](images/fullstacked/Dockerfile) |
18-
19-
> Hint: `latest can be replaced with an spezfic release version for more stability`
15+
| Name (tag) | Installed Tools/ Software | Description |
16+
|-------------------------|-----------------------------------------------------------------------------------------------------------|------------------------------------------------------------------------------------------------------------------------------------|
17+
| `latest-base` | libffi-dev, libicu-dev, build-essential, libssl-dev, ca-certificates, jq, sed, grep, git, curl, wget, zip | Base runner with nothing fancy installed <br> [Dockerfile](images/base/Dockerfile) |
18+
| `latest-kaniko-sidecar` | kaniko | Sidecar used by other runner images to build containers without root privileges |
19+
| `latest-ansible-k8s` | base-image + ansible, helm, kubectl, skopeo | Runner specialized for automated k8s deployments via ansible <br> For more Details see [Dockerfile](images/ansible-k8s/Dockerfile) |
20+
| `latest-fullstacked` | base-image + maven, openjdk-11, nodejs, go, yarn, angular/cli, helm | Runner with a bunch of tools to build your hole application<br> For more Details see [Dockerfile](images/fullstacked/Dockerfile) |
21+
22+
> Hint: `latest` can be replaced with an specific release version for more stability in your environment.
2023
2124
---
2225

‎images/base/Dockerfile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ ENV GH_RUNNER_WORKDIR="/home/${USERNAME}"
1212
ENV GH_KANIKO_WORKDIR="/kaniko/workspace"
1313

1414
# https://github.com/actions/runner/releases
15-
ENV GH_RUNNER_VERSION=2.290.1
15+
ENV GH_RUNNER_VERSION=2.291.1
1616
ENV GH_RUNNER_LABELS=ubuntu-20.04
1717

1818
ENV AWESOME_CI_VERSION 0.11.3

0 commit comments

Comments
 (0)