Prova pipeline 5

.gitea/workflows/crea-container.yaml

@@ -1,9 +1,5 @@
 name: Compila e pubblica sul registro integrato
-on:
-  push:
-    branches:
-      - 'main'
-    workflow_dispatch:
+on: [push]
 
 jobs:
   Build-Docker-Image:
@@ -13,8 +9,10 @@ jobs:
       - name: Login to Docker Registry
         run: echo "${{ secrets.REGISTRYTOKEN }}" | docker login "${{ vars.REGISTRY_URL }}" -u "${{ github.repository_owner }}" --password-stdin
 
-      - name: Checkout Code
-        uses: actions/checkout@v4
+      - name: Checkout Repository (sha-256 patch)
+        uses: https://github.com/yangskyboxlabs/action-checkout@b9de40a2281eb217887b8290be4254823d67a20b # Same as actions/checkout@v4, but with sha256
+        with:
+          object-format: sha256
 
       - name: Build Docker image
         run: |

.gitea/workflows/demo.yaml

@@ -9,8 +9,10 @@ jobs:
       - run: echo "🎉 The job was automatically triggered by a ${{ gitea.event_name }} event."
       - run: echo "🐧 This job is now running on a ${{ runner.os }} server hosted by Gitea!"
       - run: echo "🔎 The name of your branch is ${{ gitea.ref }} and your repository is ${{ gitea.repository }}."
-      - name: Check out repository code
-        uses: actions/checkout@v4
+      - name: Checkout Repository (sha-256 patch)
+        uses: https://github.com/yangskyboxlabs/action-checkout@b9de40a2281eb217887b8290be4254823d67a20b # Same as actions/checkout@v4, but with sha256
+        with:
+          object-format: sha256
       - run: echo "💡 The ${{ gitea.repository }} repository has been cloned to the runner."
       - run: echo "🖥️ The workflow is now ready to test your code on the runner."
       - name: List files in the repository