carrtech/ct-ops
3
0
Fork 0
Code Issues 28 Pull requests Projects Releases 750 Packages Wiki Activity Actions

fix(ci): use build digest output for release images #584

Merged
simon merged 1 commit from fix/release-digest-capture into main 2026-06-12 22:02:53 +00:00
Conversation 0 Commits 1 Files changed 8 +32 -8
simon commented 2026-06-12 21:47:47 +00:00
Owner
Copy link

Summary

  • use docker/build-push-action digest output for release image refs
  • remove post-push manifest inspection that can hang on the Docker Hub mirror
  • apply the same pattern to web, ingest, and ansible-api publish workflows

Validation

  • verified no publish workflow still uses docker buildx imagetools inspect for digest capture

This addresses the release job hanging in Capture manifest digest against 10.100.0.1:5000 after the image push succeeds.

## Summary - use docker/build-push-action digest output for release image refs - remove post-push manifest inspection that can hang on the Docker Hub mirror - apply the same pattern to web, ingest, and ansible-api publish workflows ## Validation - verified no publish workflow still uses docker buildx imagetools inspect for digest capture This addresses the release job hanging in Capture manifest digest against 10.100.0.1:5000 after the image push succeeds.
feat(docker): support server image scanning mode
All checks were successful
Conventional PR title / Conventional PR title (pull_request) Successful in 1s
Details
PR Checks (Docker images) / Ansible API contract (pull_request) Successful in 7s
Details
PR Checks (Docker images) / Detect Docker image changes (pull_request) Successful in 12s
Details
Secret Scan / gitleaks (pull_request) Successful in 28s
Details
PR Checks (Go) / Go (test / build) (pull_request) Successful in 58s
Details
PR Checks (Docker images) / Ansible API Docker image (pull_request) Has been skipped
Details
SAST / crypto-lint (no weak hashes / ciphers) (pull_request) Successful in 1m10s
Details
SAST / semgrep (pull_request) Successful in 1m11s
Details
SAST / gosec (ingest) (pull_request) Successful in 2m6s
Details
SAST / gosec (agent) (pull_request) Successful in 2m8s
Details
SAST / trivy (filesystem) (pull_request) Successful in 2m9s
Details
SAST / trivy (config / IaC) (pull_request) Successful in 2m3s
Details
PR Checks (Web) / Web (lint / type-check / build) (pull_request) Successful in 2m47s
Details
PR Checks (Docker images) / Ingest Docker image (pull_request) Successful in 6m14s
Details
PR Checks (Docker images) / Web Docker image (pull_request) Successful in 9m20s
Details
7c350560c4
fix(ci): use build digest output for release images
Some checks failed
Conventional PR title / Conventional PR title (pull_request) Successful in 1s
Details
CI Policy / Workflow runner policy (pull_request) Successful in 7s
Details
PR Checks (Docker images) / Ansible API contract (pull_request) Successful in 6s
Details
Customer bundle check / validate (pull_request) Failing after 8s
Details
PR Checks (Docker images) / Detect Docker image changes (pull_request) Successful in 8s
Details
PR Checks (Docker images) / Web Docker image (pull_request) Has been cancelled
Details
PR Checks (Docker images) / Ingest Docker image (pull_request) Has been cancelled
Details
PR Checks (Docker images) / Ansible API Docker image (pull_request) Has been cancelled
Details
SAST / trivy (config / IaC) (pull_request) Has been cancelled
Details
Secret Scan / gitleaks (pull_request) Has been cancelled
Details
SAST / gosec (ingest) (pull_request) Has been cancelled
Details
SAST / trivy (filesystem) (pull_request) Has been cancelled
Details
SAST / crypto-lint (no weak hashes / ciphers) (pull_request) Has been cancelled
Details
SAST / semgrep (pull_request) Has been cancelled
Details
SAST / gosec (agent) (pull_request) Has been cancelled
Details
PR Checks (Go) / Go (test / build) (pull_request) Successful in 56s
Details
PR Checks (Web) / Web (lint / type-check / build) (pull_request) Successful in 2m49s
Details
39d71330e1
simon force-pushed fix/release-digest-capture from 39d71330e1
Some checks failed
Conventional PR title / Conventional PR title (pull_request) Successful in 1s
Details
CI Policy / Workflow runner policy (pull_request) Successful in 7s
Details
PR Checks (Docker images) / Ansible API contract (pull_request) Successful in 6s
Details
Customer bundle check / validate (pull_request) Failing after 8s
Details
PR Checks (Docker images) / Detect Docker image changes (pull_request) Successful in 8s
Details
PR Checks (Docker images) / Web Docker image (pull_request) Has been cancelled
Details
PR Checks (Docker images) / Ingest Docker image (pull_request) Has been cancelled
Details
PR Checks (Docker images) / Ansible API Docker image (pull_request) Has been cancelled
Details
SAST / trivy (config / IaC) (pull_request) Has been cancelled
Details
Secret Scan / gitleaks (pull_request) Has been cancelled
Details
SAST / gosec (ingest) (pull_request) Has been cancelled
Details
SAST / trivy (filesystem) (pull_request) Has been cancelled
Details
SAST / crypto-lint (no weak hashes / ciphers) (pull_request) Has been cancelled
Details
SAST / semgrep (pull_request) Has been cancelled
Details
SAST / gosec (agent) (pull_request) Has been cancelled
Details
PR Checks (Go) / Go (test / build) (pull_request) Successful in 56s
Details
PR Checks (Web) / Web (lint / type-check / build) (pull_request) Successful in 2m49s
Details
to 08e6298bc2
Some checks failed
Conventional PR title / Conventional PR title (pull_request) Successful in 0s
Details
CI Policy / Workflow runner policy (pull_request) Successful in 7s
Details
Customer bundle check / validate (pull_request) Failing after 11s
Details
PR Checks (Docker images) / Ansible API contract (pull_request) Successful in 7s
Details
PR Checks (Docker images) / Detect Docker image changes (pull_request) Successful in 10s
Details
PR Checks (Docker images) / Web Docker image (pull_request) Has been cancelled
Details
PR Checks (Docker images) / Ingest Docker image (pull_request) Has been cancelled
Details
PR Checks (Docker images) / Ansible API Docker image (pull_request) Has been cancelled
Details
SAST / crypto-lint (no weak hashes / ciphers) (pull_request) Has been cancelled
Details
SAST / trivy (config / IaC) (pull_request) Has been cancelled
Details
SAST / trivy (filesystem) (pull_request) Has been cancelled
Details
SAST / gosec (agent) (pull_request) Has been cancelled
Details
Secret Scan / gitleaks (pull_request) Has been cancelled
Details
SAST / gosec (ingest) (pull_request) Has been cancelled
Details
SAST / semgrep (pull_request) Has been cancelled
Details
2026-06-12 21:48:21 +00:00 Compare
simon force-pushed fix/release-digest-capture from 08e6298bc2
Some checks failed
Conventional PR title / Conventional PR title (pull_request) Successful in 0s
Details
CI Policy / Workflow runner policy (pull_request) Successful in 7s
Details
Customer bundle check / validate (pull_request) Failing after 11s
Details
PR Checks (Docker images) / Ansible API contract (pull_request) Successful in 7s
Details
PR Checks (Docker images) / Detect Docker image changes (pull_request) Successful in 10s
Details
PR Checks (Docker images) / Web Docker image (pull_request) Has been cancelled
Details
PR Checks (Docker images) / Ingest Docker image (pull_request) Has been cancelled
Details
PR Checks (Docker images) / Ansible API Docker image (pull_request) Has been cancelled
Details
SAST / crypto-lint (no weak hashes / ciphers) (pull_request) Has been cancelled
Details
SAST / trivy (config / IaC) (pull_request) Has been cancelled
Details
SAST / trivy (filesystem) (pull_request) Has been cancelled
Details
SAST / gosec (agent) (pull_request) Has been cancelled
Details
Secret Scan / gitleaks (pull_request) Has been cancelled
Details
SAST / gosec (ingest) (pull_request) Has been cancelled
Details
SAST / semgrep (pull_request) Has been cancelled
Details
to 15cec40ce2
All checks were successful
Conventional PR title / Conventional PR title (pull_request) Successful in 0s
Details
CI Policy / Workflow runner policy (pull_request) Successful in 7s
Details
PR Checks (Docker images) / Ansible API contract (pull_request) Successful in 6s
Details
PR Checks (Docker images) / Detect Docker image changes (pull_request) Successful in 9s
Details
Customer bundle check / validate (pull_request) Successful in 11s
Details
PR Checks (Go) / Go (test / build) (pull_request) Successful in 58s
Details
Secret Scan / gitleaks (pull_request) Successful in 29s
Details
SAST / semgrep (pull_request) Successful in 1m12s
Details
SAST / crypto-lint (no weak hashes / ciphers) (pull_request) Successful in 1m7s
Details
SAST / gosec (agent) (pull_request) Successful in 2m4s
Details
SAST / gosec (ingest) (pull_request) Successful in 2m4s
Details
SAST / trivy (config / IaC) (pull_request) Successful in 2m4s
Details
SAST / trivy (filesystem) (pull_request) Successful in 2m7s
Details
PR Checks (Docker images) / Ansible API Docker image (pull_request) Successful in 4m40s
Details
PR Checks (Docker images) / Ingest Docker image (pull_request) Successful in 7m16s
Details
PR Checks (Docker images) / Web Docker image (pull_request) Successful in 9m52s
Details
2026-06-12 21:50:37 +00:00 Compare
simon merged commit 60a83194e7 into main 2026-06-12 22:02:53 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
E2E Failure
Regression found by end-to-end automation

  
area:agent
Go agent

  
area:audit-log
Audit logging

  
area:auth
Authentication

  
area:authz
Authorisation / RBAC

  
area:ci
CI / tooling / scanning

  
area:crypto
Cryptography / secrets

  
area:db
Database / schema

  
area:docker
Docker / deployment

  
area:headers
HTTP headers / CSP

  
area:ingest
gRPC ingest service

  
area:ldap
LDAP integration

  
area:rate-limit
Rate limiting / abuse prevention

  
area:ssrf
Server-side request forgery

  
area:supply-chain
Supply chain / deploy

  
area:terminal
Terminal / PTY

  
autorelease: pending

   
autorelease: tagged

   
bug
Something isn't working

  
claude-working

   
documentation
Improvements or additions to documentation

  
duplicate
This issue or pull request already exists

  
enhancement
New feature or request

  
good first issue
Good for newcomers

  
help wanted
Extra attention is needed

  
invalid
This doesn't seem right

  
priority: critical
Critical - blocking or data loss

  
priority: high
High priority - should be addressed soon

  
priority: low
Low priority - nice to have

  
priority: medium
Medium priority - address after high priority items

  
question
Further information is requested

  
security
Security finding from pre-pentest audit

  
sev:critical
Severity: Critical

  
sev:high
Severity: High

  
sev:info
Severity: Informational / Hardening

  
sev:low
Severity: Low

  
sev:medium
Severity: Medium

  
tests-required
Needs tests or stronger coverage before fix is complete

  
wontfix
This will not be worked on

No labels
E2E Failure
area:agent
area:audit-log
area:auth
area:authz
area:ci
area:crypto
area:db
area:docker
area:headers
area:ingest
area:ldap
area:rate-limit
area:ssrf
area:supply-chain
area:terminal
autorelease: pending
autorelease: tagged
bug
claude-working
documentation
duplicate
enhancement
good first issue
help wanted
invalid
priority: critical
priority: high
priority: low
priority: medium
question
security
sev:critical
sev:high
sev:info
sev:low
sev:medium
tests-required
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
carrtech/ct-ops!584
No description provided.