fix: tag with latest only when its config is true

fix(ci): fetch all necessary commits for commitsar and release notary
chore(deps): update actions/checkout action to v2
2022-01-24 10:46:25 +01:00 · 2022-01-24 10:45:57 +01:00 · 2022-01-24 10:13:55 +01:00 · 2022-01-24 10:11:09 +01:00 · 2022-01-24 10:04:50 +01:00 · 2022-01-24 10:04:40 +01:00
3 changed files with 14 additions and 7 deletions
--- a/.github/workflows/pr.yml
+++ b/.github/workflows/pr.yml
@@ -6,6 +6,8 @@ jobs:
    runs-on: ubuntu-latest
    name: Verify commit messages
    steps:
-      - uses: actions/checkout@v1
+      - uses: actions/checkout@v2
+        with:
+          fetch-depth: 0
      - name: Run commitsar
-        uses: docker://aevea/commitsar@sha256:caf5539dd03309a539906c7ad45c2ecc0ae86a1ee2bf5dc538d7986c523526f3
+        uses: docker://aevea/commitsar@sha256:b77adebc0437d4f2bfdf9205a39003e88acbc77a9176fd086b386207a5f3f5cb
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -10,10 +10,12 @@ jobs:
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
-        uses: actions/checkout@v1
+        uses: actions/checkout@v2
+        with:
+          fetch-depth: 0

      - name: Release Notary Action
-        uses: docker://aevea/release-notary@sha256:5eef3c539deb5397457a6acf001ef80df6004ec52bc4b8a0eac0577ad92759d0
+        uses: docker://aevea/release-notary@sha256:8b26ced466da96b23a947d5c9e58baac22ee1192fd08200011e5b178f42118a0
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

--- a/entrypoint.sh
+++ b/entrypoint.sh
@@ -10,10 +10,13 @@ export TAG=${TAG#$INPUT_STRIP_TAG_PREFIX}
 export USERNAME=${INPUT_USERNAME:-$GITHUB_ACTOR}
 export PASSWORD=${INPUT_PASSWORD:-$GITHUB_TOKEN}
 export REPOSITORY=$IMAGE
-export IMAGE_LATEST=${INPUT_TAG_WITH_LATEST:+"$IMAGE:latest"}
 export IMAGE=$IMAGE:$TAG
 export CONTEXT_PATH=${INPUT_PATH}

+if [[ "$INPUT_TAG_WITH_LATEST" == "true" ]]; then
+    export IMAGE_LATEST="$IMAGE:latest"
+fi
+
 function ensure() {
    if [ -z "${1}" ]; then
        echo >&2 "Unable to find the ${2} variable. Did you set with.${2}?"
@@ -61,7 +64,7 @@ export DOCKERFILE="--dockerfile $CONTEXT_PATH/${INPUT_BUILD_FILE:-Dockerfile}"
 export TARGET=${INPUT_TARGET:+"--target=$INPUT_TARGET"}

 if [ ! -z $INPUT_SKIP_UNCHANGED_DIGEST ]; then
-    export DESTINATION="--digest-file digest --tarPath image.tar --destination $IMAGE"
+    export DESTINATION="--digest-file digest --no-push --tarPath image.tar --destination $IMAGE"
 else
    export DESTINATION="--destination $IMAGE"
    if [ ! -z $IMAGE_LATEST ]; then
@@ -89,7 +92,7 @@ if [ ! -z $INPUT_SKIP_UNCHANGED_DIGEST ]; then
    export DIGEST=$(cat digest)

    if [ "$REGISTRY" == "docker.pkg.github.com" ]; then
-        wget -q -O manifest --header "Authorization: Basic $(echo -n $USERNAME:$PASSWORD | base64)" https://docker.pkg.github.com/v2/$REPOSITORY/manifests/latest || true
+        wget -q -O manifest --header "Authorization: Basic $(echo -n $USERNAME:$PASSWORD | base64 | tr -d \\n)" https://docker.pkg.github.com/v2/$REPOSITORY/manifests/latest || true
        export REMOTE="sha256:$(cat manifest | sha256sum | awk '{ print $1 }')"
    else
        export REMOTE=$(reg digest -u $USERNAME -p $PASSWORD $REGISTRY/$REPOSITORY | tail -1)
Author	SHA1	Message	Date
Julien Semaan	8e9a423400	fix: tag with latest only when its config is true	2022-01-24 10:46:25 +01:00
Alex Viscreanu	f16a14fc0f	fix(ci): fetch all necessary commits for commitsar and release notary	2022-01-24 10:45:57 +01:00
Renovate Bot	8bd3e02fd2	chore(deps): update actions/checkout action to v2	2022-01-24 10:13:55 +01:00
Renovate Bot	571e42aef3	chore(deps): update aevea/release-notary docker digest to 8b26ced	2022-01-24 10:11:09 +01:00
Renovate Bot	e846d42497	chore(deps): update aevea/commitsar docker digest to b77adeb	2022-01-24 10:04:50 +01:00
Renovate Bot	b7f0f661e3	chore(deps): update aevea/release-notary docker digest to fad8346	2022-01-24 10:04:40 +01:00
Dmitry Tsoy	7033a0543d	fix: long base64 string may contain new-line if the base64 string has more than 76 characters, it is wrapped with \n	2022-01-24 10:03:08 +01:00
Doron Somech	e03153c634	fix: don't push image when skip_unchanged_digest is set Kaniko default behavior changed, `--tarPath` alone is not enough to skip the push to registry, `--no-push` is now required as well. Reference: GoogleContainerTools/kaniko#1503	2021-09-21 11:52:28 +02:00