Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 3 additions & 20 deletions .github/workflows/build_and_push_image.yml
Original file line number Diff line number Diff line change
Expand Up @@ -66,23 +66,6 @@ jobs:
- name: Create and push manifest images
uses: lidofinance/docker-manifest-action@b33ab348026b120a895167160f5605b0197f0862
with:
inputs: ghcr.io/lidofinance/scripts:${{ github.ref_name }}
images: ghcr.io/lidofinance/scripts:${{ github.ref_name }}-amd64,ghcr.io/lidofinance/scripts:${{ github.ref_name }}-arm64
push: true

run-trivy:
needs: docker-manifest
runs-on: ubuntu-24.04
steps:
- name: Checkout
uses: actions/checkout@v4

- name: Run Trivy vulnerability scanner
uses: lidofinance/trivy-action@master
with:
image-ref: 'ghcr.io/lidofinance/scripts:${{ github.ref_name }}'
format: 'table'
exit-code: '0'
ignore-unfixed: true
vuln-type: 'os,library'
severity: 'CRITICAL,HIGH'
inputs: ghcr.io/lidofinance/scripts:${{ github.ref_name }}
images: ghcr.io/lidofinance/scripts:${{ github.ref_name }}-amd64,ghcr.io/lidofinance/scripts:${{ github.ref_name }}-arm64
push: true
12 changes: 7 additions & 5 deletions Dockerfile
Original file line number Diff line number Diff line change
@@ -1,18 +1,21 @@
FROM nikolaik/python-nodejs:python3.10-nodejs18
FROM node:18-bookworm-slim AS node
FROM python:3.10-slim-bookworm
USER root
ARG TARGETARCH

# copy Node.js 18 from the official node image
COPY --from=node /usr/local /usr/local

# install common prerequisites
RUN corepack prepare yarn@1.22 --activate
RUN poetry self update 1.8.2
RUN pip install poetry==1.8.2
RUN rm -f /usr/local/bin/yarn /usr/local/bin/yarnpkg && npm install -g yarn@1.22.22


# if running on arm64 - build solc
RUN if [ "$TARGETARCH" = "arm64" ]; then \
# install cmake
apt update; \
apt install cmake -y; \
apt install cmake git wget build-essential -y; \
fi

WORKDIR /root/
Expand Down Expand Up @@ -318,7 +321,6 @@ RUN echo "cd /root/scripts" >> /root/.bashrc

# verify prerequisites versions
RUN python --version | grep 'Python 3.10.' || (echo "Incorrect python version" && exit 1)
RUN pip --version | grep 'pip 2' || (echo "Incorrect pip version" && exit 1)
RUN node --version | grep 'v18.' || (echo "Incorrect node version" && exit 1)
RUN npm --version | grep '10.' || (echo "Incorrect npm version" && exit 1)
RUN poetry --version | grep 'Poetry (version 1.8.2)' || (echo "Incorrect poetry version" && exit 1)
Expand Down
Loading