ci: rollback oras to v0.12.0 (#228)

aquasecurity · Jul 14, 2022 · 3e1814e · 3e1814e
1 parent 0230f73
commit 3e1814e
Showing 1 changed file with 8 additions and 1 deletion.
diff --git a/.github/workflows/cron.yml b/.github/workflows/cron.yml
@@ -49,11 +49,18 @@ jobs:
           username: ${{ env.GH_USER }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Install oras
+        run: |
+          # oras was rollbacked to v0.12.0, because now v0.13.0 (the latest version) contains bugs: https://github.com/oras-project/oras/issues/447
+          curl -LO https://github.com/oras-project/oras/releases/download/v0.12.0/oras_0.12.0_linux_amd64.tar.gz
+          tar -xvf ./oras_0.12.0_linux_amd64.tar.gz
+
       - name: Upload assets to GHCR
         run: |
+          ./oras version
           tags=(latest ${{ env.VERSION }})
           for tag in ${tags[@]}; do
-            oras push ghcr.io/${{ github.repository }}:${tag} \
+            ./oras push ghcr.io/${{ github.repository }}:${tag} \
               --manifest-config /dev/null:application/vnd.aquasec.trivy.config.v1+json \
               db.tar.gz:application/vnd.aquasec.trivy.db.layer.v1.tar+gzip
           done