From 46231bfdd30e163bf8c2c26f70e454c39564ae58 Mon Sep 17 00:00:00 2001 From: Jakub-PMX Date: Sat, 23 Aug 2025 12:23:10 +0200 Subject: [PATCH 1/5] Trigger GHA --- Dockerfile-ruby3.2-patched | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile-ruby3.2-patched b/Dockerfile-ruby3.2-patched index ab3b0ef..c138693 100644 --- a/Dockerfile-ruby3.2-patched +++ b/Dockerfile-ruby3.2-patched @@ -1,4 +1,4 @@ -# GoBuilder +# Go Builder # Use an official Go image that has the security fix (>=1.24.6). # We use -alpine to keep the builder stage small and fast. # From 7e23ff120186ba9dff040e854209f65509c5db58 Mon Sep 17 00:00:00 2001 From: Jakub-PMX Date: Sat, 23 Aug 2025 12:26:19 +0200 Subject: [PATCH 2/5] gha: Adjusts the path for file --- .github/workflows/patched.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/patched.yml b/.github/workflows/patched.yml index 4fdbdd3..cd40370 100644 --- a/.github/workflows/patched.yml +++ b/.github/workflows/patched.yml @@ -3,7 +3,7 @@ name: "aws-lambda-ruby-patched:3.2" on: pull_request: paths: - - "./Dockerfile-ruby3.2-patched" + - "Dockerfile-ruby3.2-patched" jobs: build-and-push: From b9fa5a84fbcf17e92f49e749a98eecc91bd22319 Mon Sep 17 00:00:00 2001 From: Jakub-PMX Date: Sat, 23 Aug 2025 12:28:43 +0200 Subject: [PATCH 3/5] temp: ommit the scan for now --- .github/workflows/patched.yml | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/patched.yml b/.github/workflows/patched.yml index cd40370..0fc066f 100644 --- a/.github/workflows/patched.yml +++ b/.github/workflows/patched.yml @@ -35,18 +35,18 @@ jobs: push: true platforms: linux/amd64,linux/arm64 tags: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ inputs.job-name }} - - name: Scan - id: scan - uses: anchore/scan-action@v6 - continue-on-error: true - with: - image: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ inputs.job-name }} - fail-build: true - output-format: sarif - severity-cutoff: low - add-cpes-if-none: true - - name: Update PR with vulnerability scan results - uses: forward3d/comment-failure-details@v1.0.0 - with: - report: ${{ steps.scan.outputs.sarif }} - image-name: ${{ inputs.job-name }} + # - name: Scan + # id: scan + # uses: anchore/scan-action@v6 + # continue-on-error: true + # with: + # image: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ inputs.job-name }} + # fail-build: true + # output-format: sarif + # severity-cutoff: low + # add-cpes-if-none: true + # - name: Update PR with vulnerability scan results + # uses: forward3d/comment-failure-details@v1.0.0 + # with: + # report: ${{ steps.scan.outputs.sarif }} + # image-name: ${{ inputs.job-name }} From d02f849cfe8e945457b6bc7ec57eb9e720c43bc6 Mon Sep 17 00:00:00 2001 From: Jakub-PMX Date: Sat, 23 Aug 2025 12:32:50 +0200 Subject: [PATCH 4/5] temp: hardcodes the image name --- .github/workflows/patched.yml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/patched.yml b/.github/workflows/patched.yml index 0fc066f..29f65fa 100644 --- a/.github/workflows/patched.yml +++ b/.github/workflows/patched.yml @@ -34,13 +34,13 @@ jobs: file: ./bigquery/Dockerfile4parquet push: true platforms: linux/amd64,linux/arm64 - tags: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ inputs.job-name }} + tags: ${{ secrets.DOCKER_HUB_USERNAME }}/aws-lambda-ruby-patched:3.2 # - name: Scan # id: scan # uses: anchore/scan-action@v6 # continue-on-error: true # with: - # image: ${{ secrets.DOCKER_HUB_USERNAME }}/${{ inputs.job-name }} + # image: ${{ secrets.DOCKER_HUB_USERNAME }}/aws-lambda-ruby-patched:3.2 # fail-build: true # output-format: sarif # severity-cutoff: low @@ -49,4 +49,4 @@ jobs: # uses: forward3d/comment-failure-details@v1.0.0 # with: # report: ${{ steps.scan.outputs.sarif }} - # image-name: ${{ inputs.job-name }} + # image-name: aws-lambda-ruby-patched:3.2 From d8f4f2ebd1e92c5a0e141c9908c9e9ddbe734542 Mon Sep 17 00:00:00 2001 From: Jakub-PMX Date: Sat, 23 Aug 2025 12:35:44 +0200 Subject: [PATCH 5/5] fix: corrects the Dockerfile name --- .github/workflows/patched.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/patched.yml b/.github/workflows/patched.yml index 29f65fa..497d162 100644 --- a/.github/workflows/patched.yml +++ b/.github/workflows/patched.yml @@ -31,7 +31,7 @@ jobs: uses: docker/build-push-action@v6 with: context: . - file: ./bigquery/Dockerfile4parquet + file: ./Dockerfile-ruby3.2-patched push: true platforms: linux/amd64,linux/arm64 tags: ${{ secrets.DOCKER_HUB_USERNAME }}/aws-lambda-ruby-patched:3.2