ci: added image decription for packages stored in github #patch (#10)

* ci: added image decription for packages stored in github #patch * chore: formatted files --------- Co-authored-by: Tomi Amao <[email protected]>
tomi-amao · Aug 10, 2024 · 565e9f2 · 565e9f2
1 parent 7aff4a7
commit 565e9f2
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 5 deletions.
diff --git a/.github/workflows/quality-security.yml b/.github/workflows/quality-security.yml
@@ -1,8 +1,6 @@
 name: Code Quality & Security
 
 on:
-  push:
-    branches: ["main"]
   pull_request:
     # The branches below must be a subset of the branches above
     branches: ["main"]
@@ -34,7 +32,6 @@ jobs:
 
       - name: Run Prettier
         run: npx prettier . --check
-        continue-on-error: true
 
       - name: Run ESLint
         run: npx eslint .
@@ -70,7 +67,6 @@ jobs:
       - name: Authenticate snyk
         run: snyk auth "$SNYK_TOKEN"
         env:
-          # This is where you will need to introduce the Snyk API token created with your Snyk account
           SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
         # Runs Snyk Code (SAST) analysis and uploads result into GitHub.
         # Use || true to not fail the pipeline

diff --git a/.github/workflows/release-publish.yml b/.github/workflows/release-publish.yml
@@ -59,6 +59,9 @@ jobs:
       attestations: write
       id-token: write
     steps:
+      - name: Get current date
+        run: echo "CURRENT_DATE=$(date +'%Y-%m-%d %H:%M:%S')" >> $GITHUB_ENV
+
       - name: Check out the repo
         uses: actions/checkout@v4
 
@@ -103,7 +106,7 @@ jobs:
           provenance: mode=max #create attestation for docker image
           cache-from: type=gha
           cache-to: type=gha,mode=max
-          outputs: type=image,name=target,${{ steps.meta.outputs.annotations }},${{steps.meta.outputs.labels}}
+          outputs: type=image,name=target,annotation-index.org.opencontainers.image.description="Date;${{ env.CURRENT_DATE }} Reposoitory; ${{ github.repository }} Repo URL; ${{github.repositoryUrl}} Commit SHA; ${{github.sha}} "
 
       - name: Generate artifact attestation
         uses: actions/attest-build-provenance@v1