Commit graph

66 commits

Author SHA1 Message Date
danilapog
a4edd7b34e Refactoring code 2026-08-11 11:22:22 +00:00
danilapog
49455c2c18 feat(rebuild): now the retag is done in the order of releases 2026-08-11 10:59:41 +00:00
danilapog
4eb540f0bf Rebuild secure pached images from scratch
Co-authored-by: danilapog <danil.titarenko@onlyoffice.com>
2026-08-07 14:30:51 +00:00
danilapog
24938dc336 feat(ci): Change source repo for rebuild images
Also save source save image for backup
2026-07-28 22:28:43 +00:00
danilapog
02b1c2a612 feat: rebuild only ee/de editions in secure-rebuild 2026-07-22 14:53:18 +00:00
danilapog
913716df2e Run on monday 9am
Also do not retag if dry_run true
2026-07-21 13:48:25 +00:00
danilapog
18062a0787 Also remove unused cron 2026-07-21 13:48:25 +00:00
danilapog
3cdec1156e Feat: add actions for secure rebuild ds images 2026-07-21 13:48:25 +00:00
Nasrullo Nurullaev
1a21bc0154 Add Trivy vulnerability and secret scanning 2026-07-21 16:50:49 +05:00
danilapog
a4c4c802bb Refactor(ci): fold developers editions into enterprise toogle 2026-06-03 14:29:51 +03:00
danilapog
24fcc1142d Allow selecting editions to release via dynamic matrix
Co-authored-by: danilapog <danil.titarenko@onlyoffice.com>
Co-committed-by: danilapog <danil.titarenko@onlyoffice.com>
2026-06-02 14:37:31 +00:00
danilapog
97d98d8d46 Build: fix empty matrix generation 2026-05-07 13:47:41 +03:00
danilapog
63e2069a1c Fix native tag removing
Just set valid secrets name
2026-04-03 17:18:12 +03:00
danilapog
a9cf04177d Add functions that will cleanup native tags (#77)
Co-authored-by: danilapog <danil.titarenko@onlyoffice.com>
Co-committed-by: danilapog <danil.titarenko@onlyoffice.com>
2026-03-31 14:17:04 +00:00
danilapog
913a27878c Actions: bump depends actions that use in release 2026-03-02 15:19:40 +03:00
danilapog
da786307b0 Disable action that update hub docker repo description
Co-authored-by: danilapog <danil.titarenko@onlyoffice.com>
Co-committed-by: danilapog <danil.titarenko@onlyoffice.com>
2026-03-02 12:07:05 +00:00
danilapog
1229d0ff3f Build ucs only for amd64 platform
Co-authored-by: danilapog <danil.titarenko@onlyoffice.com>
Co-committed-by: danilapog <danil.titarenko@onlyoffice.com>
2026-03-02 12:05:25 +00:00
papacarlo
c4bc28ee5d Merge branch release/v9.3.0 into master 2026-02-24 14:16:45 +00:00
danilapog
f63607aecc Build: get runner specification from the matrix 2026-02-11 14:11:58 +03:00
danilapog
0bf51cae5e Cosmetic: just cosmetic fix 2026-02-10 16:27:28 +03:00
danilapog
425241b1a5 Build: build images on navite runners
Also make multiarch image with simple tag after build
2026-02-10 16:20:23 +03:00
Alexander Trofimov
fbc253d293 Add structured issue templates with YAML format 2026-02-04 19:07:08 +03:00
danilapog
c1c4f9793a Fix secrets name 2025-11-24 10:55:46 +00:00
danilapog
ec12b6a021 4enterprise release separately with separate logins 2025-11-24 10:55:46 +00:00
Vladimir Ischenko
b13570f221 Add msfonts caching to avoid install issues 2025-11-13 08:52:10 +00:00
danilapog
32b11818cc Disable zap ajax spider untill action not fixed 2025-11-11 15:14:03 +00:00
danilapog
38946cb641 Add provenance information to bake build steps 2025-08-04 13:47:08 +03:00
danilapog
0671c29443 Add SBOM generation to Docker buildx bake steps 2025-08-01 17:29:07 +03:00
Nasrullo Nurullaev
3c5f2f40a6 Add workflow to enforce Docker Hub README size limit 2025-07-10 15:51:32 +05:00
Nasrullo Nurullaev
7f46a5be42 Add step to update Docker Hub README 2025-07-02 12:43:29 +05:00
danilapog
39b82a3c9a build: add conditional tagging for latest in stable-build workflow
- Introduced  input in the GitHub Actions workflow with a default value of . - Passed the  input as an environment variable () to the workflow. - Updated  to conditionally add the  Docker tag based on  value.
2025-04-24 14:17:08 +03:00
danilapog
9c2012b534 Bump zap scanner action version
Fix deprecated artifacts included action
2025-03-11 09:58:54 +00:00
danilapog
4ed8027cbe Fix bug 72341 - Injections with operating system commands (#15)
Co-authored-by: danilapog <danil.titarenko@onlyoffice.com>
Co-committed-by: danilapog <danil.titarenko@onlyoffice.com>
2025-01-09 14:34:43 +00:00
Nasrullo Nurullaev
2e4c0e7ebc Update base image to 24.04 (#13)
Reviewed-on: https://git.onlyoffice.com/ONLYOFFICE/Docker-DocumentServer/pulls/13
Reviewed-by: Alexey Golubev <Alexey.Golubev@onlyoffice.com>
Co-authored-by: Nasrullo Nurullaev <nasrullo.nurullaev@onlyoffice.com>
Co-committed-by: Nasrullo Nurullaev <nasrullo.nurullaev@onlyoffice.com>
2024-12-16 07:38:40 +00:00
Roman Demidov
b665c004da
Use mssql-tools version from BASE_IMAGE (#731)
* Use mssql-tools version from BASE_IMAGE

* Small changes

* Small changes

* Small changes

* Small changes

* Small changes
2024-05-03 11:23:12 +03:00
papacarlo
40efc5bea9 Merge branch release/v8.0.0 into master 2024-01-30 11:32:11 +00:00
Danil Titarenko
6416c2c32a
Action small fixes (#697) 2023-12-21 13:22:02 +03:00
Danil Titarenko
016440fd4b
Disable issue creation from zap scanner (#695) 2023-12-20 11:22:37 +03:00
Danil Titarenko
cb06c6f6e1
Correct startup conditions for zap scanner (#694) 2023-12-20 11:21:34 +03:00
Danil Titarenko
276c5da9f5
Add the ability to manually launch the zap scanner (#691)
* Add zap scanning for DocumentServer

* Set branch name as ref for manual trigger

* Use master as default zap action branch

* Move zap action to master branch

* Fix token variable name

* Small cosmetic fix

* Modify zap action trigger condition

Run zap scanner only when documentserver edition hit community and branch hit in `release/` or `hotfix/`
2023-12-19 11:45:12 +03:00
Danil Titarenko
84a8191de9
Add DocumentServer zap scanner (#685)
* Add DocumentServer zap scanner

* Fix zap target url from `http` to `https`
2023-12-19 11:24:58 +03:00
Semyon Bezrukov
09ac8b5463
Fix build workflow runs names (#679) 2023-11-20 12:05:00 +03:00
Danil Titarenko
9400eedc06
Add auto rebuild previous releases
* Add the ability to rebuild images

Rebuilding images will be done manually (for now). The choice of the number of rebuilt releases is available (1 by default), the choice of repositories for pushing rebuilt images is available (4testing by default).

Principle of operation:
Through the api of the docker hub, we get the last launched tag that falls under the pattern x.x.x.1, after that the tag with the assembly of which the minor tag x.x will be sent will be calculated. Next, at one of the build steps, the number of the previous release will be received, for example x. x.x.4 which will mean that the current one will be x.x.x.5

* Add login to dockerhub

* Refactoring code

Set some variables for all rebuild-info job. Also set default values for repository and quantity variables

* Refactor: remove push trigger

* Refactoring code

* Refactor: Unlinking a version

* Submitting the latest tag for the latest release only
2023-06-29 14:50:17 +05:00
Danil Titarenko
7d32cac40a
Add new stable images versioning principles (#633)
* Refactoring stable images release versioning

The new principle of stable docker images versioning: release numbering is now not by build number, but by serial number.

* Refactoring: fix non-example image pull tag
2023-05-25 18:36:33 +05:00
Semyon Bezrukov
989647852e
Fix deprecated set-output (#632) 2023-05-24 13:51:14 +05:00
Semyon Bezrukov
44eb6c45f2
Fix deb package link (#602) 2023-04-14 22:32:04 +05:00
Semyon Bezrukov
4499ca1d34
Fix deb package link (#599) 2023-04-10 17:10:23 +05:00
Danil Titarenko
f98d6a4ae3
Fix ucs build (#574)
Links on packages was update
2023-01-31 19:05:26 +05:00
Danil Titarenko
c017ed1680
Fix stable build (#573)
Remove image present checker, because its not work corractly
2023-01-31 17:18:39 +05:00
Semyon Bezrukov
edb6e9b044 Merge branch 'hotfix/v7.2.2' into feature/release-merge 2022-12-20 13:24:55 +03:00