From e75a832f13a2461fd8a255f67f8b60ed9cb7426b Mon Sep 17 00:00:00 2001 From: Totto16 Date: Tue, 17 Dec 2024 18:42:30 +0100 Subject: [PATCH] ci: make checks into errors instead of warnings skip the check SecretsUsedInArgOrEnv, since it is a false positive in all cases in this repo --- .github/workflows/debian.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/debian.yml b/.github/workflows/debian.yml index 0222434..2b9581d 100644 --- a/.github/workflows/debian.yml +++ b/.github/workflows/debian.yml @@ -68,7 +68,8 @@ jobs: command: | docker build --pull \ -t haskell:${{ matrix.ghc }}-${{ matrix.deb }} \ - ${{ matrix.ghc_minor }}/${{ matrix.deb }} + ${{ matrix.ghc_minor }}/${{ matrix.deb }} \ + --build-arg "BUILDKIT_DOCKERFILE_CHECK=skip=SecretsUsedInArgOrEnv;error=true" - uses: actions/checkout@v4 with: repository: docker-library/official-images @@ -135,7 +136,8 @@ jobs: docker build --pull --progress=plain \ --platform "linux/${{ matrix.docker_platform }}" \ -t haskell:${{ matrix.ghc }}-${{ matrix.deb }} \ - ${{ matrix.ghc_minor }}/${{ matrix.deb }} + ${{ matrix.ghc_minor }}/${{ matrix.deb }} \ + --build-arg "BUILDKIT_DOCKERFILE_CHECK=skip=SecretsUsedInArgOrEnv;error=true" echo 'testing..' docker run \ --platform "linux/${{ matrix.docker_platform }}" \