Skip to content

build: upgrade rclone --> v1 pin to avoid CVE-2024-24790 #21

build: upgrade rclone --> v1 pin to avoid CVE-2024-24790

build: upgrade rclone --> v1 pin to avoid CVE-2024-24790 #21

name: 🔧 Build ODK Images
on:
# Push includes PR merge
push:
branches:
- development
paths:
# Workflow is triggered only if odkcentral dir changes
- "odkcentral/**"
# Allow manual trigger
workflow_dispatch:
jobs:
build-odkcentral:
uses: hotosm/gh-workflows/.github/workflows/[email protected]
with:
context: odkcentral/api
image_tags: |
"ghcr.io/${{ github.repository }}/odkcentral:${{ vars.ODK_CENTRAL_TAG }}"
"ghcr.io/${{ github.repository }}/odkcentral:latest"
extra_build_args: |
ODK_CENTRAL_TAG=${{ vars.ODK_CENTRAL_TAG }}
# odkcentral backend npm install fails on ARM64
# uncomment once fixed
# multi_arch: true
build-odkcentral-ui:
uses: hotosm/gh-workflows/.github/workflows/[email protected]
with:
context: odkcentral/ui
image_tags: |
"ghcr.io/${{ github.repository }}/odkcentral-ui:${{ vars.ODK_CENTRAL_TAG }}"
"ghcr.io/${{ github.repository }}/odkcentral-ui:latest"
extra_build_args: |
ODK_CENTRAL_TAG=${{ vars.ODK_CENTRAL_TAG }}
multi_arch: true