Commit Graph

6 Commits (5d258aa5b5f9d80c0193da3c6fd27a11a5cf2a10)

Author SHA1 Message Date
Fadhli Azhari bf03ec0266 ci: remove schedule trigger (unsupported on Gitea 1.20)
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-14 09:59:46 +08:00
Fadhli Azhari 274f7d5310 ci: remove workflow_dispatch trigger
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-14 09:57:54 +08:00
Fadhli Azhari a2e78b8fbd fix(ci): harbor login mangled username and added newline to password
Pass HARBOR_USERNAME/HARBOR_PASSWORD via env: instead of inlining
${{ secrets.* }} directly into the shell — bash was expanding the `$`
in the robot username (e.g. `robot$kollect-tools+...` lost the
`$kollect-tools` segment). Switched echo to printf to avoid appending a
newline to --password-stdin.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-14 09:45:39 +08:00
Fadhli Azhari 8376250940 build: cache docker layers, configurable engine, bump owasp/pnpm
- CI workflow uses BuildKit inline cache + --cache-from previous :latest;
  NVD_REFRESH build-arg busts the OWASP layer on schedule/dispatch so
  weekly rebuilds still refresh NVD while push builds reuse cached layers.
- build-and-push.ps1 reads CONTAINER_ENGINE from .env (docker default,
  podman supported); add .env.example.
- Bump OWASP Dependency-Check 12.2.1 -> 12.2.2 and pnpm 11.0.6 -> 11.1.1.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-14 09:43:21 +08:00
Fadhli Azhari 58e25ebd4d build: Update libraries to latest version 2026-04-30 09:52:17 +08:00
Fadhli Azhari e75d014023 build: Added java 21 build with maven and NVD libraries 2026-04-14 12:27:41 +08:00