Hardened Malloc 2025040400

.gitea/workflows/build.yml

@@ -4,7 +4,7 @@ on:
   workflow_dispatch:
   push:
     branches:
-      - main
+      - development
     # Ignore Markdown files
     paths-ignore:
       - '**.md'
@@ -24,7 +24,7 @@ jobs:
       contents: read
       packages: write
     timeout-minutes: 10
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
 
     steps:
       - name: Checkout code
@@ -33,6 +33,7 @@ jobs:
       - name: Extract version for tags
         run: |
           echo "FULL_VERSION=$(grep -oP '(?<=VERSION=).*' Dockerfile)" >> $GITHUB_ENV
+          echo ${{ github.repository_owner }}
 
       # Add support for more platforms with QEMU
       - name: Set up QEMU
@@ -47,7 +48,7 @@ jobs:
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          password: ${{ secrets.ACTIONS_TOKEN }}
 
       - name: Set Docker metadata
         id: meta
@@ -74,10 +75,14 @@ jobs:
     permissions:
       security-events: write
     timeout-minutes: 10
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     steps:
+      - name: debug
+        run: |
+          echo ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.TAG }}
+
       - name: Run Trivy vulnerability scanner
-        uses: aquasecurity/trivy-action@master
+        uses: aquasecurity/trivy-action@0.29.0
         with:
           image-ref: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ env.TAG }}
           format: template
@@ -85,6 +90,8 @@ jobs:
           output: trivy-results.sarif
           severity: UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL
           vuln-type: os,library
+          cache: 'false'
+          github-pat: ${{ secrets.ACTIONS_TOKEN }}
 
       - name: Upload Trivy scan results to GitHub Security tab
         uses: github/codeql-action/upload-sarif@v3
@@ -98,7 +105,7 @@ jobs:
     permissions:
       security-events: write
     timeout-minutes: 10
-    runs-on: ubuntu-24.04
+    runs-on: ubuntu-latest
     steps:
       - name: Run Grype vulnerability scanner
         uses: anchore/scan-action@v6

Dockerfile

@@ -1,5 +1,4 @@
-ARG VERSION=2024101200
+ARG VERSION=2025040400
-
 FROM alpine:latest
 
 LABEL maintainer="Lukas Raub titanz@pm.me"

README.md

@@ -1,6 +1,6 @@
 # hardened_malloc
 
-![Build, scan & push](https://github.com/titanz-containers/hardened_malloc/actions/workflows/build.yml/badge.svg)
+![Build, scan & push](https://git.conorz.at/titanz-containers/hardened_malloc/actions/workflows/build.yml/badge.svg)
 
 ### Features & usage
 hardened_malloc is built by this container and placed in `/install`