- Notifications
You must be signed in to change notification settings - Fork 121
cd: use correct login action for acr #146
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
WalkthroughThe GitHub Actions workflow for publishing containers was updated by replacing the Azure-specific Docker login action with the generic Docker login action, and by updating the relevant input parameter to match the new action's requirements. No changes were made to public or exported code entities. Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Possibly related PRs
Suggested reviewers
Poem
Note 🔌 MCP (Model Context Protocol) integration is now available in Early Access!Pro users can now connect to remote MCP servers under the Integrations page to get reviews and chat conversations that understand additional development context. ✨ Finishing Touches🧪 Generate unit tests
🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Create a ticket on our support page for assistance with any issues or questions. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File ( |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Actionable comments posted: 0
🧹 Nitpick comments (2)
.github/workflows/publish.yml (2)
166-171: Minor hygiene: consider logging out after pushesEphemeral runners reduce risk, but adding docker/logout-action for both registries tightens supply-chain hygiene.
Example:
- name: Logout from GHCR uses: docker/logout-action@v3 with: registry: ghcr.io - name: Logout from ACR uses: docker/logout-action@v3 with: registry: ${{ secrets.ACR_AZUREHOUND_REGISTRY_URL }}
166-171: Optional: ensure the pinned commit is up-to-dateYou’re pinning docker/login-action to a commit (good for integrity). Consider tracking updates (e.g., with Dependabot) to pick up security and bug fixes on that action SHA.
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
📒 Files selected for processing (1)
.github/workflows/publish.yml(1 hunks)
🔇 Additional comments (2)
.github/workflows/publish.yml (2)
166-171: Switch to docker/login-action and input rename look correctUsing docker/login-action with the registry input is appropriate for ACR. Credentials mapping (client ID/secret) also looks correct.
168-168: Verify ACR registry secret format (must be hostname only, no scheme)Ensure ACR_AZUREHOUND_REGISTRY_URL resolves to something like myregistry.azurecr.io (no https://, no trailing slash). If it includes a scheme or path, both login and image tagging will fail.
Summary by CodeRabbit