Fix: Update CI workflow to use Alpine-based images, install Node.js and Trivy with improved methods, and enhance dependency scanning steps #1

Merged
ilia merged 11 commits from update-ci into master 2025-12-17 22:45:01 -05:00
12 changed files with 12 additions and 9 deletions
Showing only changes of commit 277a22d962 - Show all commits

View File

@ -6,4 +6,4 @@ ansible_become: true
ansible_become_method: sudo
# Configure shell for ladmin user
shell_users:
- ladmin
- ladmin

View File

@ -45,6 +45,7 @@
fi
register: brave_repo_check
failed_when: false
changed_when: false
when: applications_brave_needs_install
- name: Clean up duplicate Brave repository files

View File

@ -16,4 +16,4 @@ install_r: false
r_packages:
- r-base
- r-base-dev
- r-recommended
- r-recommended

View File

@ -4,4 +4,4 @@
name: jupyter-notebook
state: restarted
daemon_reload: true
become: true
become: true

View File

@ -1,3 +1,3 @@
---
dependencies:
- role: base
- role: base

View File

@ -199,4 +199,4 @@
- name: Display R version
ansible.builtin.debug:
msg: "R version installed: {{ r_version.stdout_lines[0] if r_version.stdout_lines | length > 0 else 'Not checked in dry-run mode' }}"
msg: "R version installed: {{ r_version.stdout_lines[0] if r_version.stdout_lines | length > 0 else 'Not checked in dry-run mode' }}"

View File

@ -46,6 +46,7 @@
fi
register: nodesource_key_check
failed_when: false
changed_when: false
when: node_version_check.rc != 0 or not node_version_check.stdout.startswith('v22')
- name: Remove incorrect NodeSource repository

View File

@ -43,4 +43,4 @@
ansible.builtin.file:
path: /tmp/docker.gpg
state: absent
when: docker_key_check.stdout in ["not_exists", "wrong_key"]
when: docker_key_check.stdout in ["not_exists", "wrong_key"]

View File

@ -26,4 +26,4 @@
repo: "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/debian {{ ansible_distribution_release }} stable"
state: present
update_cache: true
when: docker_repo_check.stdout in ["not_exists", "wrong_config"]
when: docker_repo_check.stdout in ["not_exists", "wrong_config"]

View File

@ -34,4 +34,4 @@
repo: "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu {{ docker_ubuntu_codename }} stable"
state: present
update_cache: true
when: docker_repo_check.stdout in ["not_exists", "wrong_config"]
when: docker_repo_check.stdout in ["not_exists", "wrong_config"]

View File

@ -26,4 +26,4 @@
repo: "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu {{ ansible_distribution_release }} stable"
state: present
update_cache: true
when: docker_repo_check.stdout in ["not_exists", "wrong_config"]
when: docker_repo_check.stdout in ["not_exists", "wrong_config"]

View File

@ -34,6 +34,7 @@
fi
register: tailscale_repo_check
failed_when: false
changed_when: false
when: tailscale_version_check.rc != 0
- name: Remove incorrect Tailscale GPG key