Skip to content

Commit

Permalink
Merge pull request #61 from Burnett01/release/7.0.1
Browse files Browse the repository at this point in the history
- Pin @JoshPiper [drinternet/rsync](https://github.com/JoshPiper/rsync-docker) image by SHA-256 hash rather than version.  (Immutability)
Added via #60 

The docker image of this action is now pinned to the specific SHA-256 hash of the version rather than just the version.
This means for the latest `drinternet/rsync:v1.4.4` the corresponding hash is `drinternet/rsync@sha256:15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234`

Check for validation: https://hub.docker.com/layers/drinternet/rsync/v1.4.4/images/sha256-15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234

With that, usage of this action is even more secure due to a consistent dependency chain of trust,
since changes accompanied by a docker image hash are immutable.

Thanks to @XComp
  • Loading branch information
Burnett01 authored Mar 31, 2024
2 parents e1c5b90 + b2bc75a commit 796cf0d
Show file tree
Hide file tree
Showing 3 changed files with 10 additions and 7 deletions.
3 changes: 2 additions & 1 deletion Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
FROM drinternet/rsync:v1.4.4
# drinternet/[email protected]
FROM drinternet/rsync@sha256:15b2949838074bd93c49421c22380396a0cd53a322439e799ac87afcadcfe234

# Copy entrypoint
COPY entrypoint.sh /entrypoint.sh
Expand Down
2 changes: 1 addition & 1 deletion LICENSE
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
MIT License

Copyright (c) 2019-2022 Contention
Copyright (c) 2019-2022 Burnett01
Copyright (c) 2019-2024 Burnett01

Permission is hereby granted, free of charge, to any person obtaining a copy
of this software and associated documentation files (the "Software"), to deal
Expand Down
12 changes: 7 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -40,6 +40,8 @@ This action needs secret variables for the ssh private key of your key pair. The
For simplicity, we are using `DEPLOY_*` as the secret variables throughout the examples.

## Current Version: 7.0.1

## Example usage

Simple:
Expand All @@ -57,7 +59,7 @@ jobs:
steps:
- uses: actions/checkout@v3
- name: rsync deployments
uses: burnett01/[email protected].0
uses: burnett01/[email protected].1
with:
switches: -avzr --delete
path: src/
Expand All @@ -76,7 +78,7 @@ jobs:
steps:
- uses: actions/checkout@v3
- name: rsync deployments
uses: burnett01/[email protected].0
uses: burnett01/[email protected].1
with:
switches: -avzr --delete --exclude="" --include="" --filter=""
path: src/
Expand All @@ -96,7 +98,7 @@ jobs:
steps:
- uses: actions/checkout@v3
- name: rsync deployments
uses: burnett01/[email protected].0
uses: burnett01/[email protected].1
with:
switches: -avzr --delete
path: src/
Expand All @@ -116,7 +118,7 @@ jobs:
steps:
- uses: actions/checkout@v3
- name: rsync deployments
uses: burnett01/[email protected].0
uses: burnett01/[email protected].1
with:
switches: -avzr --delete
path: src/
Expand All @@ -142,7 +144,7 @@ jobs:
steps:
- uses: actions/checkout@v3
- name: rsync deployments
uses: burnett01/[email protected].0
uses: burnett01/[email protected].1
with:
switches: -avzr --delete
legacy_allow_rsa_hostkeys: "true"
Expand Down

0 comments on commit 796cf0d

Please sign in to comment.