From 4c4b7751cce8ba924262764ca524820b2348a81d Mon Sep 17 00:00:00 2001 From: Jesse_Chen Date: Wed, 5 Aug 2026 14:12:25 +0800 Subject: [PATCH] Use pinned ECR PostgreSQL image for Gitea CI --- .gitea/workflows/backend-quality-gate.yml | 2 +- frontend/tests/staging-backend-workflows.test.ts | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/backend-quality-gate.yml b/.gitea/workflows/backend-quality-gate.yml index 690e9a0a..176739c0 100644 --- a/.gitea/workflows/backend-quality-gate.yml +++ b/.gitea/workflows/backend-quality-gate.yml @@ -126,7 +126,7 @@ jobs: - name: Preload PostgreSQL integration image env: - POSTGRES_TEST_SOURCE_IMAGE: swr.cn-north-4.myhuaweicloud.com/ddn-k8s/docker.io/library/postgres:17-alpine + POSTGRES_TEST_SOURCE_IMAGE: public.ecr.aws/docker/library/postgres:17-alpine@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193 POSTGRES_TEST_IMAGE: postgres:17-alpine run: | set -euo pipefail diff --git a/frontend/tests/staging-backend-workflows.test.ts b/frontend/tests/staging-backend-workflows.test.ts index a0bfda67..c88cc2f8 100644 --- a/frontend/tests/staging-backend-workflows.test.ts +++ b/frontend/tests/staging-backend-workflows.test.ts @@ -152,7 +152,7 @@ test("Gitea quality gate validates before publishing an immutable ACR manifest", assert.match(workflow, /docker compose --help \| grep -q -- '--project-name'/); assert.match( workflow, - /POSTGRES_TEST_SOURCE_IMAGE: swr\.cn-north-4\.myhuaweicloud\.com\/ddn-k8s\/docker\.io\/library\/postgres:17-alpine/, + /POSTGRES_TEST_SOURCE_IMAGE: public\.ecr\.aws\/docker\/library\/postgres:17-alpine@sha256:742f40ea20b9ff2ff31db5458d127452988a2164df9e17441e191f3b72252193/, ); assert.match(workflow, /POSTGRES_TEST_IMAGE: postgres:17-alpine/); assert.match(workflow, /docker image inspect "\$POSTGRES_TEST_IMAGE"/);