ci: run socket-free jobs on the light label #3

Merged
jcoffey-dev merged 1 commits from ci/light-runner into main 2026-09-22 13:58:08 +00:00
+9 -9
View File
@@ -30,7 +30,7 @@ concurrency:
jobs: jobs:
# ----------------------------------------------------- license compliance -- # ----------------------------------------------------- license compliance --
rust-licenses: rust-licenses:
runs-on: docker runs-on: light
container: container:
image: rust:1-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e # 1-bookworm image: rust:1-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e # 1-bookworm
strategy: strategy:
@@ -44,7 +44,7 @@ jobs:
- run: cargo deny --manifest-path "$CRATE_DIR/Cargo.toml" check licenses - run: cargo deny --manifest-path "$CRATE_DIR/Cargo.toml" check licenses
go-licenses: go-licenses:
runs-on: docker runs-on: light
container: container:
image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm
strategy: strategy:
@@ -64,7 +64,7 @@ jobs:
--ignore github.com/segmentio/asm --ignore github.com/segmentio/asm
npm-licenses: npm-licenses:
runs-on: docker runs-on: light
container: container:
image: node:22-bookworm-slim@sha256:48e4b67d85f87bd551df43704e24d252f56cc5f8e9718841aace50f19948f0f9 # 22-bookworm-slim image: node:22-bookworm-slim@sha256:48e4b67d85f87bd551df43704e24d252f56cc5f8e9718841aace50f19948f0f9 # 22-bookworm-slim
steps: steps:
@@ -79,7 +79,7 @@ jobs:
# ---------------------------------------------------------- security scan -- # ---------------------------------------------------------- security scan --
rust-advisories: rust-advisories:
needs: [rust-licenses, go-licenses, npm-licenses] needs: [rust-licenses, go-licenses, npm-licenses]
runs-on: docker runs-on: light
container: container:
image: rust:1-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e # 1-bookworm image: rust:1-bookworm@sha256:93ce27a88655056a51dbdd8f5f2d7ddc071c7b0070fb288a37b5a285fc83971e # 1-bookworm
strategy: strategy:
@@ -94,7 +94,7 @@ jobs:
go-vulncheck: go-vulncheck:
needs: [rust-licenses, go-licenses, npm-licenses] needs: [rust-licenses, go-licenses, npm-licenses]
runs-on: docker runs-on: light
container: container:
image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm
strategy: strategy:
@@ -112,7 +112,7 @@ jobs:
npm-audit: npm-audit:
needs: [rust-licenses, go-licenses, npm-licenses] needs: [rust-licenses, go-licenses, npm-licenses]
runs-on: docker runs-on: light
container: container:
image: node:22-bookworm-slim@sha256:48e4b67d85f87bd551df43704e24d252f56cc5f8e9718841aace50f19948f0f9 # 22-bookworm-slim image: node:22-bookworm-slim@sha256:48e4b67d85f87bd551df43704e24d252f56cc5f8e9718841aace50f19948f0f9 # 22-bookworm-slim
steps: steps:
@@ -127,7 +127,7 @@ jobs:
# bare debian. # bare debian.
tenant-boundary: tenant-boundary:
needs: [rust-advisories, go-vulncheck, npm-audit] needs: [rust-advisories, go-vulncheck, npm-audit]
runs-on: docker runs-on: light
container: container:
image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm
steps: steps:
@@ -136,7 +136,7 @@ jobs:
web-routes: web-routes:
needs: [rust-advisories, go-vulncheck, npm-audit] needs: [rust-advisories, go-vulncheck, npm-audit]
runs-on: docker runs-on: light
container: container:
image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm image: golang:1.26-bookworm@sha256:a688600ca24f8a4d3ca77f95b0dd40704a9fc787c826660eb7ba0b641b8b175d # 1.26-bookworm
steps: steps:
@@ -145,7 +145,7 @@ jobs:
conformance-corpus: conformance-corpus:
needs: [rust-advisories, go-vulncheck, npm-audit] needs: [rust-advisories, go-vulncheck, npm-audit]
runs-on: docker runs-on: light
container: container:
image: python:3.13-slim@sha256:8d9d0b8bcf6506481eae4907c18f5e3e7902e629f5f6d684f9e7c32e85e3ddf0 # 3.13-slim image: python:3.13-slim@sha256:8d9d0b8bcf6506481eae4907c18f5e3e7902e629f5f6d684f9e7c32e85e3ddf0 # 3.13-slim
steps: steps: