mitre / hipcheck

Automatically assess and score software repositories for supply chain risk.
https://mitre.github.io/hipcheck/
Apache License 2.0
74 stars 5 forks source link

Fix Docker Hub release #369

Open alilleybrinker opened 2 months ago

alilleybrinker commented 2 months ago

https://github.com/mitre/hipcheck/actions/runs/10783600284

patrickjcasey commented 1 month ago

I investigated this issue and was unable to determine why the Docker Hub job did not run on the 3.6.2 nor 3.6.3 releases. There was a bug in the Docker image build process related to apt installing the protobuf-compiler package in the wrong step of the Containerfile. But based on the GitHub actions documentation, it seems like the job should have run after a successful release pipeline, which occurred for both 3.6.2 and 3.6.3.

The following releases of hipcheck are missing from Dockerhub

There is a tool https://github.com/nektos/act that looks useful for debugging issues, but Docker does seem to have issues with MITRE's internal network