ci(deploy): login, pull images, and increase Trivy timeout #140

2026-06-13T19:32:05+03:00

Toutsu commented

2026-06-13 19:32:05 +03:00

Summary

Deploy pipeline scan-images job runs on a fresh runner and could not find the images built by build-and-push. This PR adds registry login, docker pull, and --timeout 30m to the Trivy image scan steps so the scan can complete on slow ARM64 runners.

Changes

.gitea/workflows/deploy.yml: add login, pull, and 30m timeout to the scan-images job.

Test plan

Merge to main and verify deploy pipeline #329 rerun succeeds.

## Summary Deploy pipeline `scan-images` job runs on a fresh runner and could not find the images built by `build-and-push`. This PR adds registry login, `docker pull`, and `--timeout 30m` to the Trivy image scan steps so the scan can complete on slow ARM64 runners. ## Changes - `.gitea/workflows/deploy.yml`: add login, pull, and 30m timeout to the `scan-images` job. ## Test plan - Merge to main and verify deploy pipeline #329 rerun succeeds.

Toutsu added 1 commit 2026-06-13 19:32:05 +03:00

ci(deploy): login and pull images before Trivy scan

PR Checks / test-and-build (pull_request) Successful in 32m3s

Details

b952be23eb

The scan-images job runs on a fresh runner that does not have the images
built by the build-and-push job. Login to the registry and pull the
images before scanning, otherwise Trivy cannot find them.

Toutsu merged commit e59b0a78fd into main

2026-06-13 19:32:18 +03:00

Toutsu changed title from ~~ci(deploy): login and pull images before Trivy scan~~ to ci(deploy): login, pull images, and increase Trivy timeout

2026-06-13 20:25:32 +03:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: Toutsu/GmRelayBot#140