feat: add lint, build, test, push pipeline with SHA-pinned actions
Docker Build and Push / lint (pull_request) Failing after 9s
Docker Build and Push / build (pull_request) Successful in 2m7s
Docker Build and Push / test (pull_request) Has been skipped
Docker Build and Push / push (pull_request) Has been skipped

- Split single build job into 4 jobs: lint, build, test, push
- SHA-pin all actions for supply chain security
- Use ChristopherHX artifact actions (Gitea-compatible)
- Add tests/test.sh with Docker bridge gateway networking
- Add hadolint ignore for apt/brace patterns
This commit is contained in:
2026-06-08 19:41:56 +00:00
parent c065123d90
commit a1d6f90967
3 changed files with 143 additions and 24 deletions
+1
View File
@@ -1,6 +1,7 @@
FROM "php:8.3-apache"
LABEL maintainer="Julien Cabillot <dockerimages@cabillot.eu>"
# hadolint ignore=DL3008,DL3015,SC3009
RUN export DEBIAN_FRONTEND="noninteractive" && \
sed -i'' 's/ServerSignature On/ServerSignature Off/; s/ServerTokens OS/ServerTokens Prod/' "/etc/apache2/conf-enabled/security.conf" && \
sed -i'' 's/^Listen 80$/Listen 8080/' "/etc/apache2/ports.conf" && \