feat: Update ldez/traefik-certs-dumper to v2.10.0 (#197)

* Update ldez/traefik-certs-dumper to v2.10.0 for docker flavor

* Update alpine flavor to be based on alpine:3.21.3

* Remove deprecated Dockerfile for Docker Hub release

* Update actions/cache to v4.2.2

* Don't run dev build pipeline on push events and update secrets ref

* Activate login step for pull requests

* Run Codacy scan for pushes only to develop, release and master branches

Author: kereis

.github/workflows/codacy.yml

@@ -2,6 +2,10 @@ name: Codacy Security Scan
 
 on:
   push:
+    branches:
+      - 'develop'
+      - 'release/*'
+      - 'master'
   pull_request:
   schedule:
     - cron: '19 9 * * 4'

.github/workflows/dev-build.yml

@@ -1,10 +1,6 @@
 name: Build dev images
 
 on:
-  push:
-    branches-ignore:
-      - 'release/**'
-      - 'develop'
   pull_request:
     branches-ignore:
       - 'release/**'
@@ -54,7 +50,7 @@ jobs:
           driver-opts: network=host          
 
       - name: Cache Docker layers
-        uses: actions/cache@v4.0.2
+        uses: actions/cache@v4.2.2
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-buildx-${{ github.sha }}
@@ -63,11 +59,10 @@ jobs:
 
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3
-        if: ${{ github.event_name != 'pull_request' }}
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          password: ${{ secrets.CR_PAT }}
 
       - name: Build image
         uses: docker/build-push-action@v5
@@ -110,20 +105,19 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Cache Docker layers
-        uses: actions/cache@v4.0.2
+        uses: actions/cache@v4.2.2
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-buildx-${{ github.sha }}
           restore-keys: |
             ${{ runner.os }}-buildx-
 
       - name: Login to GitHub Container Registry
-        uses: docker/login-action@v3
-        if: ${{ github.event_name != 'pull_request' }}        
+        uses: docker/login-action@v3     
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          password: ${{ secrets.CR_PAT }}
 
       - name: Build image
         uses: docker/build-push-action@v5

.github/workflows/docker-hub-release.yml

@@ -43,7 +43,7 @@ jobs:
           driver-opts: network=host          
 
       - name: Cache Docker layers
-        uses: actions/cache@v4.0.2
+        uses: actions/cache@v4.2.2
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-buildx-${{ github.sha }}
@@ -99,7 +99,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Cache Docker layers
-        uses: actions/cache@v4.0.2
+        uses: actions/cache@v4.2.2
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-buildx-${{ github.sha }}

.github/workflows/edge-build.yml

@@ -43,7 +43,7 @@ jobs:
           driver-opts: network=host          
 
       - name: Cache Docker layers
-        uses: actions/cache@v4.0.2
+        uses: actions/cache@v4.2.2
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-buildx-${{ github.sha }}
@@ -102,7 +102,7 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Cache Docker layers
-        uses: actions/cache@v4.0.2
+        uses: actions/cache@v4.2.2
         with:
           path: /tmp/.buildx-cache
           key: ${{ runner.os }}-buildx-${{ github.sha }}

.github/workflows/release.yml

@@ -1,18 +1,24 @@
-FROM ldez/traefik-certs-dumper:v2.8.3
+FROM alpine:3.21.3
 
 RUN \
     apk update && \
     apk add --no-cache \
+        --no-progress \
         inotify-tools \
         util-linux \
         bash \
-        openssl
+        openssl \
+        ca-certificates \
+        tzdata && \
+    rm -rf /var/cache/apk/*
 
 COPY bin/dump.sh /usr/bin/dump
 COPY bin/healthcheck.sh /usr/bin/healthcheck
 
 RUN ["chmod", "+x", "/usr/bin/dump", "/usr/bin/healthcheck"]
 
+COPY --from=ldez/traefik-certs-dumper:v2.10.0 /usr/bin/traefik-certs-dumper /usr/bin/traefik-certs-dumper
+
 HEALTHCHECK --interval=30s --timeout=10s --retries=5 \
   CMD ["/usr/bin/healthcheck"]
 

alpine/Dockerfile

@@ -16,7 +16,7 @@ RUN ["chmod", "+x", "/usr/bin/dump", "/usr/bin/healthcheck"]
 HEALTHCHECK --interval=30s --timeout=10s --retries=5 \
   CMD ["/usr/bin/healthcheck"]
 
-COPY --from=ldez/traefik-certs-dumper:v2.8.1 /usr/bin/traefik-certs-dumper /usr/bin/traefik-certs-dumper
+COPY --from=ldez/traefik-certs-dumper:v2.10.0 /usr/bin/traefik-certs-dumper /usr/bin/traefik-certs-dumper
 
 VOLUME ["/traefik"]
 VOLUME ["/output"]