Add an option to skip pinning latest tagged images #150
Assignees
Comments
jhrozek
added a commit
to jhrozek/frizbee
that referenced
this issue
Jun 17, 2024
Adds two configuration options that let the user skip images that are either matching the configured image name or tag. Related: stacklok#150
jhrozek
added a commit
to jhrozek/frizbee
that referenced
this issue
Jun 17, 2024
- Fixes the default container regex to handle `FROM` directives that use a platform. Retains them when returning the modified reference - uses buildkit's dockerfile parser to get access to a real parser and use it to properly extract the image name and arguments such as `--platform` without brittle homecooked parsing - extends the image skipping to skip images or tags based on configuration - adds tests Fixes: stacklok#150 Fixes: stacklok#157
jhrozek
added a commit
to jhrozek/frizbee
that referenced
this issue
Jun 17, 2024
Adds two configuration options that let the user skip images that are either matching the configured image name or tag. Related: stacklok#150
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Details:
Perhaps same goes for actions pinned by a branch, i.e.
@mainFollow-up work:
This option should be propagated to:
The defaults there should be not pin latest images.
Reasoning:
Using latest is not suggested but at least keeps the dependency updated whereas if we pin it and they don't have dependabot enabled it might become an issue later.
The text was updated successfully, but these errors were encountered: