Update 2 files

- /update.py
- /.gitlab-ci.yml

.gitlab-ci.yml

@@ -1,41 +1,27 @@
 stages:
-  - generate
-  - release
-
-generate:
-  stage: generate
-  image: python:3.11-alpine
-  script:
-    - pip install -r requirements.txt
-    - ./update.py > tags.txt
-  artifacts:
-    expire_in: 1 hour
-    paths:
-      - tags.txt
-
-
+- release
+- test
+variables:
+  CI_APPLICATION_REPOSITORY: "$CI_REGISTRY_IMAGE"
 release-image:
-  needs:
-    - job: generate
-      artifacts: true
-  image: docker:latest
+  image: docker:24.0.6
   stage: release
-  services:
-    - docker:dind
-  variables:
-    DOCKER_HOST: tcp://docker:2376
-    DOCKER_TLS_CERTDIR: "/certs"
-    DOCKER_TLS_VERIFY: 1
-    DOCKER_CERT_PATH: "$DOCKER_TLS_CERTDIR/client"
+  rules:
+  - if: "$CI_APPLICATION_TAG"
   before_script:
-    - until docker info; do sleep 1; done
-    - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
+  - docker login -u "$CI_REGISTRY_USER" -p "$CI_REGISTRY_PASSWORD" $CI_REGISTRY
   script:
-    - |
-      for tag in $(cat tags.txt); do
-        export IMAGE_TAG=$CI_REGISTRY_IMAGE:$tag
-        echo $IMAGE_TAG
-        sed "s/latest/$tag/g" Dockerfile > Dockerfile.tmp
-        docker build . --pull -f Dockerfile.tmp -t $IMAGE_TAG
-        docker push $IMAGE_TAG
-      done
+  - |-
+    export IMAGE_TAG=$CI_APPLICATION_REPOSITORY:$CI_APPLICATION_TAG
+    echo $IMAGE_TAG
+    sed "s/latest/$CI_APPLICATION_TAG/g" Dockerfile > Dockerfile.tmp
+    docker build . --pull -f Dockerfile.tmp -t $IMAGE_TAG
+    docker push $IMAGE_TAG
+container_scanning:
+  rules:
+  - if: "$CI_APPLICATION_TAG"
+  needs:
+  - release-image
+include:
+- template: Jobs/Container-Scanning.gitlab-ci.yml
+- template: Security/Secret-Detection.gitlab-ci.yml

update.py

@@ -1,22 +0,0 @@
-#!/usr/bin/env python3
-import re
-from dxf import DXF
-from os import environ
-
-dxf = DXF('ghcr.io', "coder/coder")
-dxf.authenticate(actions=["pull"])
-tags = dxf.list_aliases()
-tags = ["v2.1.4"]
-
-
-try:
-    local_dxf = DXF(environ['CI_REGISTRY'], environ['CI_PROJECT_PATH'])
-    local_dxf.authenticate(
-        environ['CI_REGISTRY_USER'], environ['CI_REGISTRY_PASSWORD'], actions=["pull"])
-    local_tags = local_dxf.list_aliases()
-except:
-    local_tags = []
-
-update_tags = set(tags) - set(local_tags)
-
-print(' '.join(update_tags))