Skip to content

Create job to perform daily image updates

Thiago Figueiró requested to merge daily-rebuild into main

What does this MR do and why?

We originally intended the analyzer image to only contain the analyzer binary (i.e. a scratch image).

Unfortunately, the GitLab runner requires a shell and grep to be available. Given our attestation requirements, it is easier to use a base image than to copy the necessary binaries.

Since we now use an upstream image, it becomes necessary to rebuild it regularly so that the analyzer image contains the latest security updates.

This MR introduces a new job image update which runs when TRIGGER_UPDATE is set for a pipeline on the default branch.

Once the MR is merged, we need to create the scheduled job.

Related issues

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

Before After

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

Edited by Thiago Figueiró

Merge request reports