From 231c012e999fe39f9c96a5c6024a68d13c907618 Mon Sep 17 00:00:00 2001 From: alam00000 Date: Mon, 19 Oct 2026 02:07:51 +0530 Subject: [PATCH] fix(ci): avoid rate limits --- .github/workflows/trivy-scan.yml | 6 +++--- Dockerfile | 2 +- Dockerfile.nonroot | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/trivy-scan.yml b/.github/workflows/trivy-scan.yml index 680c535d..b4cc2dd1 100644 --- a/.github/workflows/trivy-scan.yml +++ b/.github/workflows/trivy-scan.yml @@ -51,7 +51,7 @@ jobs: - name: Upload Trivy results to GitHub Security uses: github/codeql-action/upload-sarif@v4 - if: always() + if: always() && hashFiles('trivy-*.sarif') != '' with: sarif_file: trivy-${{ matrix.image.name }}.sarif category: trivy-${{ matrix.image.name }} @@ -74,7 +74,7 @@ jobs: - name: Upload dependency scan results uses: github/codeql-action/upload-sarif@v4 - if: always() + if: always() && hashFiles('trivy-deps.sarif') != '' with: sarif_file: trivy-deps.sarif category: trivy-dependencies @@ -96,7 +96,7 @@ jobs: - name: Upload config scan results uses: github/codeql-action/upload-sarif@v4 - if: always() + if: always() && hashFiles('trivy-config.sarif') != '' with: sarif_file: trivy-config.sarif category: trivy-config diff --git a/Dockerfile b/Dockerfile index 245e52a6..a4f989bc 100644 --- a/Dockerfile +++ b/Dockerfile @@ -3,7 +3,7 @@ ARG BASE_URL= # Build stage -FROM public.ecr.aws/docker/library/node:20-alpine AS builder +FROM mirror.gcr.io/library/node:20-alpine AS builder WORKDIR /app COPY package*.json ./ COPY vendor ./vendor diff --git a/Dockerfile.nonroot b/Dockerfile.nonroot index aa16f550..fc31e1a2 100644 --- a/Dockerfile.nonroot +++ b/Dockerfile.nonroot @@ -5,7 +5,7 @@ ARG BASE_URL= # Build stage (identical to main Dockerfile) -FROM public.ecr.aws/docker/library/node:20-alpine AS builder +FROM mirror.gcr.io/library/node:20-alpine AS builder WORKDIR /app COPY package*.json ./ COPY vendor ./vendor