fix: use single quotes for Harbor password to prevent shell expansion
CI/CD / build-and-push (push) Successful in 1m42s Details

This commit is contained in:
Cloud User 2026-03-16 11:00:44 +09:00
parent 7ddba78d6a
commit b7ecc51f13
1 changed files with 4 additions and 7 deletions

View File

@ -6,10 +6,6 @@ on:
tags: ['v*'] tags: ['v*']
env: env:
REGISTRY: ${{ secrets.REGISTRY_URL }}
REGISTRY_USER: ${{ secrets.REGISTRY_USER }}
REGISTRY_PASSWORD: ${{ secrets.REGISTRY_PASSWORD }}
IMAGE_NAME: ${{ secrets.REGISTRY_URL }}/infra/infra-report
CHART_NAME: infra-report CHART_NAME: infra-report
jobs: jobs:
@ -27,10 +23,11 @@ jobs:
else else
echo "TAG=sha-$(echo ${GITHUB_SHA} | cut -c1-7)" >> $GITHUB_ENV echo "TAG=sha-$(echo ${GITHUB_SHA} | cut -c1-7)" >> $GITHUB_ENV
fi fi
echo "IMAGE_NAME=${{ secrets.REGISTRY_URL }}/infra/infra-report" >> $GITHUB_ENV
- name: Login to Harbor - name: Login to Harbor
run: | run: |
echo "${{ env.REGISTRY_PASSWORD }}" | docker login ${{ env.REGISTRY }} -u ${{ env.REGISTRY_USER }} --password-stdin echo '${{ secrets.REGISTRY_PASSWORD }}' | docker login ${{ secrets.REGISTRY_URL }} -u ${{ secrets.REGISTRY_USER }} --password-stdin
- name: Build and push Docker image - name: Build and push Docker image
run: | run: |
@ -50,5 +47,5 @@ jobs:
- name: Push Helm chart to Harbor (OCI) - name: Push Helm chart to Harbor (OCI)
run: | run: |
echo "${{ env.REGISTRY_PASSWORD }}" | helm registry login ${{ env.REGISTRY }} -u ${{ env.REGISTRY_USER }} --password-stdin echo '${{ secrets.REGISTRY_PASSWORD }}' | helm registry login ${{ secrets.REGISTRY_URL }} -u ${{ secrets.REGISTRY_USER }} --password-stdin
helm push ${CHART_NAME}-0.1.0.tgz oci://${{ env.REGISTRY }}/infra helm push ${CHART_NAME}-0.1.0.tgz oci://${{ secrets.REGISTRY_URL }}/infra