github/zot
1
0
Fork 0
mirror of https://github.com/project-zot/zot.git synced 2026-06-17 21:17:58 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix(ci): pass GITHUB_TOKEN explicitly to oras login in sync-trivy step (#3961)

Browse Source 
Signed-off-by: Ramkumar Chinchani <rchincha.dev@gmail.com>
This commit is contained in:
Ramkumar Chinchani
2026-04-12 01:17:41 -07:00
committed by GitHub
parent d97953f101
commit c392c91071
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/sync-3rdparty-images.yaml
+4 -1
View File
@@ -47,11 +47,14 @@ jobs:
sparse-checkout-cone-mode: false
persist-credentials: false
- name: Copy trivy-db using oras cli
env:
GHCR_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
# setup oras
make $PWD/hack/tools/bin/oras
export PATH=$PATH:$PWD/hack/tools/bin
echo "${GITHUB_TOKEN}" | oras login -u "${GITHUB_ACTOR}" --password-stdin ghcr.io
test -n "${GHCR_TOKEN}" || { echo "Missing GHCR token"; exit 1; }
echo "${GHCR_TOKEN}" | oras login -u "${GITHUB_ACTOR}" --password-stdin ghcr.io
oras copy ghcr.io/aquasecurity/trivy-db:2 ghcr.io/${{ github.repository_owner }}/trivy-db:2
oras copy ghcr.io/aquasecurity/trivy-db:latest ghcr.io/${{ github.repository_owner }}/trivy-db:latest
oras copy ghcr.io/aquasecurity/trivy-java-db:1 ghcr.io/${{ github.repository_owner }}/trivy-java-db:1