From 2edd3de9a0b9a3e87400f147ff035a5e54eae167 Mon Sep 17 00:00:00 2001 From: GitHub Actions Date: Sat, 24 Jan 2026 23:04:11 +0000 Subject: [PATCH] fix(ci): use --pull=never for PR image verification On PRs, images are loaded locally but not pushed to registry. Add --pull=never to prevent Docker from trying to fetch the image from ghcr.io, which fails with 'manifest unknown'. Modified 4 docker commands: - Caddy version check (docker run) - Caddy binary extraction (docker create) - CrowdSec version check (docker run) - CrowdSec binary extraction (docker create) --- .github/workflows/docker-build.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml index 9f9e156e..46289859 100644 --- a/.github/workflows/docker-build.yml +++ b/.github/workflows/docker-build.yml @@ -224,11 +224,11 @@ jobs: echo "" echo "==> Caddy version:" - timeout 30s docker run --rm $IMAGE_REF caddy version || echo "⚠️ Caddy version check timed out or failed" + timeout 30s docker run --rm --pull=never $IMAGE_REF caddy version || echo "⚠️ Caddy version check timed out or failed" echo "" echo "==> Extracting Caddy binary for inspection..." - CONTAINER_ID=$(docker create $IMAGE_REF) + CONTAINER_ID=$(docker create --pull=never $IMAGE_REF) docker cp ${CONTAINER_ID}:/usr/bin/caddy ./caddy_binary docker rm ${CONTAINER_ID} @@ -293,11 +293,11 @@ jobs: echo "" echo "==> CrowdSec cscli version:" - timeout 30s docker run --rm $IMAGE_REF cscli version || echo "⚠️ CrowdSec version check timed out or failed (may not be installed for this architecture)" + timeout 30s docker run --rm --pull=never $IMAGE_REF cscli version || echo "⚠️ CrowdSec version check timed out or failed (may not be installed for this architecture)" echo "" echo "==> Extracting cscli binary for inspection..." - CONTAINER_ID=$(docker create $IMAGE_REF) + CONTAINER_ID=$(docker create --pull=never $IMAGE_REF) docker cp ${CONTAINER_ID}:/usr/local/bin/cscli ./cscli_binary 2>/dev/null || { echo "⚠️ cscli binary not found - CrowdSec may not be available for this architecture" docker rm ${CONTAINER_ID}