lvl0/dishplanner
1
0
Fork 0
Code Issues 9 Pull requests Projects Releases Packages Wiki Activity Actions

61 - Authenticate composer dist downloads and drop the dead registry cache
All checks were successful
CI / ci-image (push) Successful in 25m46s
Details
CI / ci (push) Successful in 22m39s
Details

Browse source
This commit is contained in:
myrmidex 2026-08-19 15:49:09 +02:00
parent e0e3bb0936
commit cfad3dcb1b
2 changed files with 14 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
.forgejo/workflows/ci.yml
View file

@ -59,8 +59,8 @@ jobs:
file: docker/build/Dockerfile.ci file: docker/build/Dockerfile.ci
push: true push: true
tags: forge.lvl0.xyz/lvl0/dishplanner-ci:${{ steps.meta.outputs.tag }} tags: forge.lvl0.xyz/lvl0/dishplanner-ci:${{ steps.meta.outputs.tag }}
cache-from: type=registry,ref=forge.lvl0.xyz/lvl0/dishplanner-ci:buildcache secrets: |
cache-to: type=registry,ref=forge.lvl0.xyz/lvl0/dishplanner-ci:buildcache,mode=max gh_pat=${{ secrets.GH_PAT }}
ci: ci:
needs: ci-image needs: ci-image

16
docker/build/Dockerfile.ci
View file

@ -37,13 +37,21 @@ COPY --from=composer:2 /usr/bin/composer /usr/bin/composer
# Bake the project's PHP dependencies (dev included) into the image so CI # Bake the project's PHP dependencies (dev included) into the image so CI
# restores them with a local copy instead of paying a per-run composer install # restores them with a local copy instead of paying a per-run composer install
# over the network. --prefer-source clones via git instead of fetching dist # over the network.
# archives, avoiding the codeload.github.com rate limits the runner hits under #
# --prefer-dist. # The token lifts GitHub's API rate limit from 60 to 5000 requests/hour, which
# is what forced --prefer-source before; dist archives need no special handling.
# #
# --no-scripts skips `php artisan package:discover` (the app isn't present # --no-scripts skips `php artisan package:discover` (the app isn't present
# here). CI runs `composer install` after restoring vendor, which regenerates # here). CI runs `composer install` after restoring vendor, which regenerates
# bootstrap/cache. # bootstrap/cache.
WORKDIR /opt/deps WORKDIR /opt/deps
COPY composer.json composer.lock ./ COPY composer.json composer.lock ./
RUN composer install --no-interaction --no-progress --prefer-source --no-scripts RUN --mount=type=secret,id=gh_pat \
if [ -s /run/secrets/gh_pat ]; then \
composer config --global github-oauth.github.com "$(cat /run/secrets/gh_pat)" || exit 1; \
fi; \
composer install --no-interaction --no-progress --no-scripts; \
STATUS=$?; \
composer config --global --unset github-oauth.github.com >/dev/null 2>&1 || true; \
exit $STATUS