chore: add dependabot.yml, fix wildfly test#21
Conversation
jmaster1985
commented
Jun 30, 2025
- adds dependabot
- fixes missing wildfly docker-repo URL(s)
| @@ -0,0 +1,53 @@ | |||
| on: | |||
| pull_request: | |||
There was a problem hiding this comment.
since dependabot creates new pull requests, maybe it makes sense to test the containers with changes applied by dependabot. therefore this new pipeline is created - currently it only tests the operaton on amd64, since I noticed in the other pipelines that this particular image is always tested. Is it OK like this, or we need to test all three dirstros on both amd64 and arm64 platforms?
There was a problem hiding this comment.
We need to be sure that all distros are working on upstream dependency changes, especially when the distro is changing itself. IMO the regular build does this already.
This workflow tests when PRs are created on the operaton-docker repo itself. This is for example when dependencies like the base image is changing. I assume that we do not test all platforms, amd64 is enough. But the different distros could make sense.
I do not expect frequent PRs on this repo, then running 2 more build are not a problem. And we gain some safety.
There was a problem hiding this comment.
I'm including the 3 ditros for testing only on amd64 - about that env variables issue, it seems that it's a security fature from Github, the secrets and environment variables are not exposed when the pipeline is triggered by a fork-repo, it makes sense because so a 3rd uknown fork can read the env vars and secrets by having a new workflow. I used hard-coded values for the repo-urls for testing, because: a) they're anyways fixed b) for container tests which are not pushed, we don't need real repo urls
There was a problem hiding this comment.
a follow up update: here I could enable testing for operaton and tomcat distros on amd64 - the container for wildfly seems to have problems which needs to be addressed separately. I have created the issue #22 to fix that issue