Compare commits

...
3 Commits
Author SHA1 Message Date
james.maes 4fbae520ee fix: add -U flag to force Maven SNAPSHOT updates
Without -U, Maven uses cached SNAPSHOTs from the CircleCI cache
without checking for newer versions. This caused builds to use stale
SNAPSHOT dependencies even after new SNAPSHOTs were published.
2026-03-27 15:50:40 -05:00
james.maes 1e558c18af fix: correct step order — docker login must precede supplemental push
The previous fix moved build_push_supplemental before docker_push_ghcr,
but docker_push_ghcr contains the docker login to GHCR. Without it,
supplemental pushes fail with 'unauthorized'.

Correct order: docker_push_ghcr (login + push main) first, then
build_push_supplemental (build + push supplementals), then health_check
(supplementals now in local Docker cache).

Main image is pushed before health check, but Trivy has already scanned
it and a health check failure still prevents the CD update step.
2026-03-27 10:32:34 -05:00
james.maes e262339fa7 fix: build supplemental images before health check
Supplemental images (e.g. migrations) must be built locally before the
health check runs. Previously, build_push_supplemental ran AFTER
health_check, so on a first-release tag like 0.1.8 the health check
tried to pull a tag that didn't exist yet in GHCR and failed with
'unauthorized'.

New step order:
  docker_build → trivy → build_push_supplemental → health_check → docker_push_ghcr

The migrations image is now in the local Docker cache when health_check
runs, so no GHCR pull is needed. Main image is still only pushed after
the health check passes.
2026-03-27 10:13:34 -05:00
2 changed files with 7 additions and 6 deletions

No files matched your search

+6 -6
View File
@@ -57,12 +57,6 @@ steps:
- docker_build:
image_name: << parameters.image_name >>
registry: << parameters.registry >>
- health_check:
health_path: << parameters.health_path >>
health_port: << parameters.health_port >>
health_db: << parameters.health_db >>
health_migrations: << parameters.health_migrations >>
health_smoke_paths: << parameters.health_smoke_paths >>
- restore_trivy_cache
- run_trivy_image:
image_tag: << parameters.registry >>/<< parameters.image_name >>:${DOCKER_TAG}
@@ -72,3 +66,9 @@ steps:
supplemental_images: << parameters.supplemental_images >>
image_name: << parameters.image_name >>
registry: << parameters.registry >>
- health_check:
health_path: << parameters.health_path >>
health_port: << parameters.health_port >>
health_db: << parameters.health_db >>
health_migrations: << parameters.health_migrations >>
health_smoke_paths: << parameters.health_smoke_paths >>
+1
View File
@@ -18,6 +18,7 @@ munitor_check_tool java -version
echo "Running Maven build..."
mvn clean install \
-U \
-DskipTests \
--batch-mode \
--fail-at-end \