Skip to content
Snippets Groups Projects
Commit 06fd1d2b authored by Igor Witz's avatar Igor Witz
Browse files

Update .gitlab-ci.yml, pica-etherpad/clair-whitelist.yml files

parent ac9256e4
No related branches found
No related tags found
1 merge request!22Ajout de la CI pour Etherpad et Dokuwiki
Pipeline #32135 failed
......@@ -11,7 +11,6 @@ stages:
build:
stage: build
before_script:
- ls -al /docker
- echo $REGISTRY_PASSWORD | docker login $REGISTRY -u $REGISTRY_USERNAME --password-stdin
- apk update
- apk add git
......@@ -95,7 +94,7 @@ docker-bench-security:
- pica-dokuwiki/*
deployment:
stage: deployment
stage: test
variables:
DOCKER_HOST: "pica01-test.picasoft.net:2376"
before_script:
......@@ -116,10 +115,8 @@ deployment:
script:
- docker pull $REGISTRY/ci-builds/$CI_COMMIT_SHA:latest
- docker tag $REGISTRY/ci-builds/$CI_COMMIT_SHA:latest $MODIFIED_IMAGE_FULL
- (docker stop $CURRENT_CONTAINER_ID; docker rm $CURRENT_CONTAINER_ID) || true
- if [[ -d $MODIFIED_IMAGE/secrets ]]; then for i in $MODIFIED_IMAGE/secrets/* ; do cp $i $(echo $i| cut -d '.' -f1,2); done; fi;
- cd $MODIFIED_IMAGE
- docker-compose up -d --force-recreate --remove-orphans
- cd /docker
- docker-compose up $(cat docker-compose.yml | grep $MODIFIED_IMAGE_FULL -B1 | head -n1 | cut -d ':' -f1) -d --force-recreate --remove-orphans
after_script:
- rm -rf $DOCKER_CERT_PATH
- docker logout $REGISTRY
......
......@@ -12,4 +12,4 @@ generalwhitelist:
CVE-2018-1000001: glibc -> Pas de contre mesure
CVE-2017-1000408: glibc -> Pas de contre mesure
CVE-2018-6954: systemd -> Pas de contre mesure
CVE-2018-6797: Perl est une dépendance du client mysql et la version non vulnérable dans stretch n'a pas été backportée -> Pas de contre-mesure
\ No newline at end of file
CVE-2018-6797: Perl est une dépendance du client mysql et la version non vulnérable dans stretch n'a pas été backportée -> Pas de contre-mesure
\ No newline at end of file
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment