ci: make checks into errors instead of warnings

skip the check SecretsUsedInArgOrEnv, since it is a false positive in all cases in this repo
haskell · Dec 17, 2024 · 572fd37 · 572fd37
1 parent ddc968e
commit 572fd37
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/.github/workflows/debian.yml b/.github/workflows/debian.yml
@@ -68,7 +68,8 @@ jobs:
           command: |
             docker build --pull \
               -t haskell:${{ matrix.ghc }}-${{ matrix.deb }} \
-              ${{ matrix.ghc_minor }}/${{ matrix.deb }}
+              ${{ matrix.ghc_minor }}/${{ matrix.deb }} \
+              --build-arg "BUILDKIT_DOCKERFILE_CHECK=skip=SecretsUsedInArgOrEnv;error=true" .
       - uses: actions/checkout@v4
         with:
           repository: docker-library/official-images