From 53dda8ba6673c08f5672b5e3ff86824058945730 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Fri, 12 Jun 2026 16:29:29 -0400 Subject: [PATCH 1/9] fix: remove legacy monolithic workflow in favour of split pipelines --- .gitea/workflows/docker-build.yaml | 70 ------------------------------ 1 file changed, 70 deletions(-) delete mode 100644 .gitea/workflows/docker-build.yaml diff --git a/.gitea/workflows/docker-build.yaml b/.gitea/workflows/docker-build.yaml deleted file mode 100644 index 0a39922..0000000 --- a/.gitea/workflows/docker-build.yaml +++ /dev/null @@ -1,70 +0,0 @@ -name: Docker Build and Push -on: - push: - branches: [master] - pull_request: - schedule: - - cron: '30 3 * * 3' -jobs: - lint: - runs-on: ubuntu-latest - steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 - with: - dockerfile: Dockerfile - build: - runs-on: ubuntu-latest - needs: lint - steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - name: Build image - run: docker build -t ci-image:${{ github.sha }} . - - name: Save image - run: docker save ci-image:${{ github.sha }} -o image.tar - - uses: ChristopherHX/gitea-upload-artifact@62ac910c5d3dfa85c7cb2df15afe2e342b2407c2 # main - with: - name: docker-image - path: image.tar - test: - runs-on: ubuntu-latest - needs: build - steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7 # main - with: - name: docker-image - - name: Load image - run: docker load < image.tar - - name: Run tests - run: bash tests/test.sh ci-image:${{ github.sha }} - push: - runs-on: ubuntu-latest - needs: test - if: github.event_name != 'pull_request' - steps: - - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - with: - fetch-depth: 0 - - uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7 # main - with: - name: docker-image - - name: Load image - run: docker load < image.tar - - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4 - with: - username: ${{ secrets.DOCKERHUB_USERNAME }} - password: ${{ secrets.DOCKERHUB_TOKEN }} - - name: Tag and push - run: | - docker tag ci-image:${{ github.sha }} jcabillot/sslscan:latest - docker push jcabillot/sslscan:latest - - name: Bump version and push tag - if: github.event_name == 'push' - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0 - env: - GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - DEFAULT_BUMP: patch - RELEASE_BRANCHES: master - WITH_V: true - GIT_API_TAGGING: false \ No newline at end of file From 3c9163d863279e565ba34e5894d7d0f85fb4e822 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Fri, 12 Jun 2026 16:29:50 -0400 Subject: [PATCH 2/9] feat(ci): add main release pipeline with hadolint, build, test and semver tagging --- .gitea/workflows/main.yaml | 58 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 58 insertions(+) create mode 100644 .gitea/workflows/main.yaml diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml new file mode 100644 index 0000000..4b07ced --- /dev/null +++ b/.gitea/workflows/main.yaml @@ -0,0 +1,58 @@ +name: Main Release +on: + push: + branches: [master] +jobs: + hadolint: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 + continue-on-error: true + with: + dockerfile: Dockerfile + build-push: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afddd7e93d0b3df5 # v4 + - uses: docker/login-action@6500006c6eb7dba73a9955cc030b0b2d7f5ca915bee # v4 + with: + username: ${{ secrets.DOCKERHUB_USERNAME }} + password: ${{ secrets.DOCKERHUB_TOKEN }} + - id: meta + uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6 + with: + images: jcabillot/sslscan + tags: | + type=raw,value=latest + - uses: docker/build-push-action@f9f3042f7e27895886610d6e8b85c8f03e519baf # v7.2.0 + with: + context: . + push: true + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }} + pull: true + test: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afddd7e93d0b3df5 # v4 + - run: docker build -t ci-image:${{ github.sha }} . + - run: bash tests/test.sh ci-image:${{ github.sha }} + tag: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + with: + fetch-depth: 0 + - name: Configure git auth + run: | + git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@scm.cabillot.eu/perso/sslscan.git" + - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0 + env: + GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} + DEFAULT_BUMP: patch + RELEASE_BRANCHES: master + WITH_V: true + GIT_API_TAGGING: false From d4b865b3b70a687671e26b047c684e6c4529ecc5 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Fri, 12 Jun 2026 16:29:56 -0400 Subject: [PATCH 3/9] feat(ci): add PR checks pipeline with hadolint and build-test --- .gitea/workflows/pr.yaml | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) create mode 100644 .gitea/workflows/pr.yaml diff --git a/.gitea/workflows/pr.yaml b/.gitea/workflows/pr.yaml new file mode 100644 index 0000000..3499182 --- /dev/null +++ b/.gitea/workflows/pr.yaml @@ -0,0 +1,20 @@ +name: PR Checks +on: + pull_request: + branches: [master] +jobs: + hadolint: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 + continue-on-error: true + with: + dockerfile: Dockerfile + build-test: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afddd7e93d0b3df5 # v4 + - run: docker build -t ci-image:${{ github.sha }} . + - run: bash tests/test.sh ci-image:${{ github.sha }} From e30748fab2ef8101924e490b5ef4215ec545e279 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Fri, 12 Jun 2026 16:30:05 -0400 Subject: [PATCH 4/9] feat(ci): add tag release pipeline with hadolint and build-push --- .gitea/workflows/tag.yaml | 35 +++++++++++++++++++++++++++++++++++ 1 file changed, 35 insertions(+) create mode 100644 .gitea/workflows/tag.yaml diff --git a/.gitea/workflows/tag.yaml b/.gitea/workflows/tag.yaml new file mode 100644 index 0000000..1d0d7df --- /dev/null +++ b/.gitea/workflows/tag.yaml @@ -0,0 +1,35 @@ +name: Tag Release +on: + push: + tags: ['*'] +jobs: + hadolint: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 + continue-on-error: true + with: + dockerfile: Dockerfile + build-push: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afddd7e93d0b3df5 # v4 + - uses: docker/login-action@6500006c6eb7dba73a9955cc030b0b2d7f5ca915bee # v4 + with: + username: ${{ secrets.DOCKERHUB_USERNAME }} + password: ${{ secrets.DOCKERHUB_TOKEN }} + - id: meta + uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6 + with: + images: jcabillot/sslscan + tags: | + type=ref,event=tag + - uses: docker/build-push-action@f9f3042f7e27895886610d6e8b85c8f03e519baf # v7.2.0 + with: + context: . + push: true + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }} + pull: true From 950909821f15083bccc2295c5177ef9e75b3137c Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Fri, 12 Jun 2026 16:30:14 -0400 Subject: [PATCH 5/9] feat(ci): add nightly rebuild pipeline with hadolint and build-push --- .gitea/workflows/cron.yaml | 42 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 42 insertions(+) create mode 100644 .gitea/workflows/cron.yaml diff --git a/.gitea/workflows/cron.yaml b/.gitea/workflows/cron.yaml new file mode 100644 index 0000000..e36564a --- /dev/null +++ b/.gitea/workflows/cron.yaml @@ -0,0 +1,42 @@ +name: Nightly Rebuild +on: + schedule: + - cron: '0 0 * * *' +jobs: + hadolint: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0 + continue-on-error: true + with: + dockerfile: Dockerfile + build-push: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 + with: + fetch-depth: 0 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afddd7e93d0b3df5 # v4 + - uses: docker/login-action@6500006c6eb7dba73a9955cc030b0b2d7f5ca915bee # v4 + with: + username: ${{ secrets.DOCKERHUB_USERNAME }} + password: ${{ secrets.DOCKERHUB_TOKEN }} + - id: get-latest-tag + run: | + TAG=$(git describe --tags --abbrev=0 2>/dev/null || echo "") + echo "tag=$TAG" >> $GITHUB_OUTPUT + - id: meta + uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6 + with: + images: jcabillot/sslscan + tags: | + type=raw,value=latest + type=raw,value=${{ steps.get-latest-tag.outputs.tag }},enable=${{ steps.get-latest-tag.outputs.tag != '' }} + - uses: docker/build-push-action@f9f3042f7e27895886610d6e8b85c8f03e519baf # v7.2.0 + with: + context: . + push: true + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }} + pull: true From 99647283392cd25e723b80af8c2b47ac3df27796 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Fri, 12 Jun 2026 16:32:58 -0400 Subject: [PATCH 6/9] fix(ci): correct SHA pins for docker/setup-buildx-action and docker/build-push-action --- .gitea/workflows/main.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/.gitea/workflows/main.yaml b/.gitea/workflows/main.yaml index 4b07ced..bdcc2b0 100644 --- a/.gitea/workflows/main.yaml +++ b/.gitea/workflows/main.yaml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afddd7e93d0b3df5 # v4 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - uses: docker/login-action@6500006c6eb7dba73a9955cc030b0b2d7f5ca915bee # v4 with: username: ${{ secrets.DOCKERHUB_USERNAME }} @@ -26,7 +26,7 @@ jobs: images: jcabillot/sslscan tags: | type=raw,value=latest - - uses: docker/build-push-action@f9f3042f7e27895886610d6e8b85c8f03e519baf # v7.2.0 + - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7 with: context: . push: true @@ -37,7 +37,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afddd7e93d0b3df5 # v4 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - run: docker build -t ci-image:${{ github.sha }} . - run: bash tests/test.sh ci-image:${{ github.sha }} tag: From 7cbedf463a904c0097247f4287b8330823daa445 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Fri, 12 Jun 2026 16:34:37 -0400 Subject: [PATCH 7/9] fix(ci): correct SHA pin for docker/setup-buildx-action --- .gitea/workflows/pr.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.gitea/workflows/pr.yaml b/.gitea/workflows/pr.yaml index 3499182..90900eb 100644 --- a/.gitea/workflows/pr.yaml +++ b/.gitea/workflows/pr.yaml @@ -15,6 +15,6 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afddd7e93d0b3df5 # v4 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - run: docker build -t ci-image:${{ github.sha }} . - run: bash tests/test.sh ci-image:${{ github.sha }} From f7fb1df559ba03b9bf47bb41c3d5ddae832e5ce7 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Fri, 12 Jun 2026 16:34:46 -0400 Subject: [PATCH 8/9] fix(ci): correct SHA pins for docker/setup-buildx-action and docker/build-push-action --- .gitea/workflows/tag.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/tag.yaml b/.gitea/workflows/tag.yaml index 1d0d7df..b3564d5 100644 --- a/.gitea/workflows/tag.yaml +++ b/.gitea/workflows/tag.yaml @@ -15,7 +15,7 @@ jobs: runs-on: ubuntu-latest steps: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 - - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afddd7e93d0b3df5 # v4 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - uses: docker/login-action@6500006c6eb7dba73a9955cc030b0b2d7f5ca915bee # v4 with: username: ${{ secrets.DOCKERHUB_USERNAME }} @@ -26,7 +26,7 @@ jobs: images: jcabillot/sslscan tags: | type=ref,event=tag - - uses: docker/build-push-action@f9f3042f7e27895886610d6e8b85c8f03e519baf # v7.2.0 + - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7 with: context: . push: true From 6ca48b484aedbe9e751beae0cf58197627396eb5 Mon Sep 17 00:00:00 2001 From: cloudix_mcp_server Date: Fri, 12 Jun 2026 16:34:49 -0400 Subject: [PATCH 9/9] fix(ci): correct SHA pins for docker/setup-buildx-action and docker/build-push-action --- .gitea/workflows/cron.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/cron.yaml b/.gitea/workflows/cron.yaml index e36564a..e23b25e 100644 --- a/.gitea/workflows/cron.yaml +++ b/.gitea/workflows/cron.yaml @@ -17,7 +17,7 @@ jobs: - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6 with: fetch-depth: 0 - - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afddd7e93d0b3df5 # v4 + - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4 - uses: docker/login-action@6500006c6eb7dba73a9955cc030b0b2d7f5ca915bee # v4 with: username: ${{ secrets.DOCKERHUB_USERNAME }} @@ -33,7 +33,7 @@ jobs: tags: | type=raw,value=latest type=raw,value=${{ steps.get-latest-tag.outputs.tag }},enable=${{ steps.get-latest-tag.outputs.tag != '' }} - - uses: docker/build-push-action@f9f3042f7e27895886610d6e8b85c8f03e519baf # v7.2.0 + - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7 with: context: . push: true