Etienne Stalmans and Ali Waseem
c9cc6cd835
chore: cleanup gh actions ( #46454 )
...
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md )
file.
YES
## What kind of change does this PR introduce?
Chore, CI hardening
## Additional context
Hardens all GitHub actions to recommendations of
[zizmor](https://docs.zizmor.sh/audits/ )
<!-- This is an auto-generated comment: release notes by coderabbit.ai
-->
## Summary by CodeRabbit
* **Chores**
* Disabled persistence of checkout credentials across many CI workflows
to reduce credential exposure.
* Upgraded GitHub App token tooling and tightened generated token
permissions for automation.
* Added cooldown/rate-limiting to dependency update automation to reduce
update churn.
* Adjusted workflow-level permissions, required secret inputs for
workflow callers, and refactored some job step logic.
<!-- review_stack_entry_start -->
[](https://app.coderabbit.ai/change-stack/supabase/supabase/pull/46454?utm_source=github_walkthrough&utm_medium=github&utm_campaign=change_stack )
<!-- review_stack_entry_end -->
<!-- end of auto-generated comment: release notes by coderabbit.ai -->
---------
Co-authored-by: Ali Waseem <waseema393@gmail.com >
2026-05-28 17:31:04 +02:00
Ali Waseem
4d967740f7
fix permissions for docker image publish ( #43823 )
...
## I have read the
[CONTRIBUTING.md](https://github.com/supabase/supabase/blob/master/CONTRIBUTING.md )
file.
YES
## What kind of change does this PR introduce?
GitHub action permissions have changed, so because of that We need to
apply permissions on the parent
2026-03-16 15:51:55 +00:00
Etienne Stalmans
92bdbb2f57
chore: explicit permissions on actions ( #43526 )
...
enforces minimal set of permissions, the same as other actions in the
repo
2026-03-10 14:47:26 +01:00
Matt Rossman
8f8f57b8c6
feat: show published studio tags in workflow summary ( #40802 )
...
* feat: test workflow with GitHub step summary
* fix: run test workflow on commit
* feat: tweak summary
* fix: format
* feat: format as table
* fix: wording
* fix: format
* feat: remote test workflow, add summary to `publish_image.yml`
* fix: wording
2025-11-25 16:51:23 -05:00
Charis
3973cc3e5c
chore: update github workflows ( #39237 )
2025-10-20 09:36:45 -04:00
blacksmith-sh[bot]
96f99014d8
.github/workflows: Migrate workflows to Blacksmith runners ( #38549 )
...
Migrate workflows to Blacksmith
Co-authored-by: blacksmith-sh[bot] <157653362+blacksmith-sh[bot]@users.noreply.github.com>
2025-09-09 18:27:43 +08:00
Han Qiao
56f0bb58c5
chore: update docker tag for dependabot ( #35037 )
2025-04-15 22:28:23 +08:00
Han Qiao
5d8d1f92be
fix: format build version for dependabot ( #34933 )
2025-04-11 18:48:12 +08:00
Ivan Vasilov
22b76fecaf
feat: When publishing a studio image, change the latest tag in DockerHub to the latest images ( #27378 )
...
Add command to change the latest tag in DockerHub to the latest images.
2024-06-19 11:45:10 +00:00
Ivan Vasilov
0676e916c7
fix: Put a latest tag on DockerHub when publishing a new image ( #27350 )
...
* Don't create a new image whenever a new tag is published on supabase/supabase.
* No need for an input when triggering a new build.
* Enable the latest tag for all pushes.
2024-06-18 13:38:17 +02:00
Ivan Vasilov
436bdb10ae
chore: Move the studio app to apps/studio ( #18915 )
...
* Move all studio files from /studio to /apps/studio.
* Move studio specific prettier ignores.
* Fix the ui references from studio.
* Fix the css imports.
* Fix all package.json issues.
* Fix the prettier setup for the studio app.
* Add .turbo folder to prettierignore.
* Fix the github workflows.
2023-11-15 12:38:55 +01:00
Ivan Vasilov
848870d1cd
chore: Build the docker image on schedule ( #17955 )
...
* Change the action for docker image to build on schedule every Monday.
* Publish the image when pushing a tag.
2023-10-23 11:13:26 +02:00
Han Qiao
b7eff3d5a6
chore: separate release job for arm and x86 runners ( #10951 )
...
* chore: separate release job for arm and x86 runners
* chore: add missing step dependency
* chore: update sha tag
* chore: fix image name
2022-12-14 14:30:30 +08:00
Qiao Han
fc57c413f6
chore: mirror docker image to ghcr
2022-12-03 10:52:32 +08:00
Qiao Han
34360a54cb
fix: docker release workflow
2022-11-16 16:48:54 +08:00
Han Qiao
e41ef8bcf5
chore: build and push images on merge to studio ( #10019 )
2022-11-02 22:24:17 +08:00
Han Qiao
cf7f8b0077
Updates latest tag when published from branch ( #8460 )
2022-08-24 13:00:13 +08:00
Han Qiao
cb4088c6fd
Support version tag for studio image ( #8458 )
...
* Support version tag for studio image
* Always create latest tag
2022-08-18 11:58:09 +08:00
Han Qiao
c4fe625c95
Mirror studio image to ECR ( #8372 )
...
* Mirror studio image to ECR
* Renames workflow job
2022-08-16 18:48:54 +08:00
