Upgrade packages to latest to resolve CVE’s (#8)

* Upgrade packages to latest to resolve CVE’s

* only publish images from main

.github/scripts/build-base-images.sh

@@ -7,7 +7,7 @@ BUILD_REPO="${BUILD_REPO:-build-base-images}"
 PIP_VERSION="${PIP_VERSION:-22.2.1}"
 GITHUB_REF="${GITHUB_REF:-none}"
 DOCKER_PLATFORM="${DOCKER_PLATFORM:-linux/amd64}"
-DOCKERFILE="${DOCKERFILE:-rocky9.2-4}"
+DOCKERFILE="${DOCKERFILE:-rocky9.2-5}"
 CI="${CI:-false}"
 SHORT_SHA="${SHORT_SHA:-$(git rev-parse --short HEAD)}"
 

.github/workflows/ci.yml

@@ -25,7 +25,7 @@ jobs:
     strategy:
       matrix:
         docker-platform: ["linux/arm64", "linux/amd64"]
-        images: ["rocky9.2-4"]
+        images: ["rocky9.2-5"]
     runs-on: ubuntu-latest
     needs: [set-short-sha]
     env:
@@ -51,10 +51,11 @@ jobs:
   publish-images:
     strategy:
       matrix:
-        images: ["rocky9.2-4"]
+        images: ["rocky9.2-5"]
     env:
       SHORT_SHA: ${{ needs.set-short-sha.outputs.short_sha }}
     runs-on: ubuntu-latest
+    if: github.ref == 'refs/heads/main'
     needs: [set-short-sha, build-images]
     steps:
     - uses: docker/setup-buildx-action@v1

.gitignore

@@ -1 +1,2 @@
 /.DS_Store
+.DS_Store