CI: test the actual image/contained binary that we're pushing to GHCR

projectcontour / contour

Contour is a Kubernetes ingress controller using Envoy proxy.

https://projectcontour.io

Apache License 2.0

3.7k stars 672 forks source link

CI: test the actual image/contained binary that we're pushing to GHCR #4317

Open skriss opened 2 years ago

skriss commented 2 years ago

ref. #3772, #3681

A further improvement to our CI pipeline would be to test the actual image (or contained binary) that is being pushed to GHCR for workflows that push an image (currently the main and tag builds), rather than building it once for tests and once for publishing. This would improve the soundness of our supply chain and potentially cut down on runtime of the CI pipeline.

github-actions[bot] commented 1 year ago

The Contour project currently lacks enough contributors to adequately respond to all Issues.

This bot triages Issues according to the following rules:

After 60d of inactivity, lifecycle/stale is applied
After 30d of inactivity since lifecycle/stale was applied, the Issue is closed

You can:

Mark this Issue as fresh by commenting
Close this Issue
Offer to help out with triage

Please send feedback to the #contour channel in the Kubernetes Slack