docker: Don't push to the registry for Pull Requests
This requires more thought on how to handle secrets, and whether to just omit it permanently.
This commit is contained in:
parent
d54711651b
commit
02ce8fdf0d
1 changed files with 2 additions and 1 deletions
3
.github/workflows/ci-docker.yml
vendored
3
.github/workflows/ci-docker.yml
vendored
|
|
@ -45,13 +45,14 @@ jobs:
|
||||||
with:
|
with:
|
||||||
context: .
|
context: .
|
||||||
platforms: linux/amd64,linux/arm64,linux/arm/v7,windows/amd64
|
platforms: linux/amd64,linux/arm64,linux/arm/v7,windows/amd64
|
||||||
push: true
|
push: ${{ github.event_name != 'pull_request' }}
|
||||||
tags: ${{ steps.meta.outputs.tags }}
|
tags: ${{ steps.meta.outputs.tags }}
|
||||||
labels: ${{ steps.meta.outputs.labels }}
|
labels: ${{ steps.meta.outputs.labels }}
|
||||||
pull: true
|
pull: true
|
||||||
cache-from: type=gha, scope=${{ github.workflow }}
|
cache-from: type=gha, scope=${{ github.workflow }}
|
||||||
cache-to: type=gha, scope=${{ github.workflow }}
|
cache-to: type=gha, scope=${{ github.workflow }}
|
||||||
- name: Generate build provenance attestation
|
- name: Generate build provenance attestation
|
||||||
|
if: ${{ github.event_name != 'pull_request' }}
|
||||||
uses: actions/attest-build-provenance@v2
|
uses: actions/attest-build-provenance@v2
|
||||||
with:
|
with:
|
||||||
subject-name: ghcr.io/${{ github.repository }}
|
subject-name: ghcr.io/${{ github.repository }}
|
||||||
|
|
|
||||||
Loading…
Add table
Add a link
Reference in a new issue