d858c5c1f4
ci: Publish multi-arch images for both branch and tag refs. Signed-off-by: Jason Volk <jason@zemos.net>
29 lines
674 B
Docker
29 lines
674 B
Docker
# syntax = docker/dockerfile:1.11-labs
|
|
|
|
FROM input AS audit
|
|
ARG rust_toolchain="nightly"
|
|
ARG RUSTUP_HOME
|
|
ARG CARGO_HOME
|
|
ARG audit_args=""
|
|
|
|
WORKDIR /
|
|
COPY --link --from=input . .
|
|
|
|
WORKDIR /usr/src/tuwunel
|
|
RUN \
|
|
--mount=type=cache,dst=${RUSTUP_HOME}/downloads,sharing=shared \
|
|
--mount=type=cache,dst=${CARGO_HOME}/registry,sharing=shared \
|
|
--mount=type=cache,dst=${CARGO_HOME}/git,sharing=shared \
|
|
<<EOF
|
|
set -eux
|
|
rustup run ${rust_toolchain} \
|
|
cargo audit \
|
|
--stale \
|
|
--deny yanked \
|
|
--deny unsound \
|
|
--deny unmaintained \
|
|
--deny warnings \
|
|
--color=always \
|
|
${audit_args}
|
|
EOF
|