CI: quiet Docker builds and runner-friendly workflow settings.

Co-authored-by: Cursor <cursoragent@cursor.com>

.gitea/workflows/ci.yml

@@ -10,30 +10,39 @@ concurrency:
   group: eventhub-back-${{ github.ref }}
   cancel-in-progress: false
 
+env:
+  BUILDKIT_PROGRESS: quiet
+  DOCKER_BUILDKIT: 1
+
 jobs:
   test:
     runs-on: ubuntu-latest
+    timeout-minutes: 60
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Build eventhub image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: .
           file: docker/Dockerfile
           load: true
           tags: eventhub:latest
+          provenance: false
+          sbom: false
 
       - name: Build API test image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: .
           file: docker/ApiTests.Dockerfile
           load: true
           tags: eventhub-api-tests:latest
+          provenance: false
+          sbom: false
 
       - name: Run API tests (local CT)
         run: docker run --rm eventhub-api-tests:latest

.gitea/workflows/deploy-ift.yml

@@ -11,19 +11,22 @@ concurrency:
 
 env:
   REGISTRY: git.sabilin.com/eventhub
+  BUILDKIT_PROGRESS: quiet
+  DOCKER_BUILDKIT: 1
 
 jobs:
   deploy-ift-core:
     runs-on: ubuntu-latest
+    timeout-minutes: 90
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Compute image tag
         id: meta
         run: echo "tag=sha-${GITHUB_SHA::12}" >> "$GITHUB_OUTPUT"
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Login to registry
         uses: docker/login-action@v2
@@ -33,7 +36,7 @@ jobs:
           password: ${{ secrets.REGISTRY_PASSWORD }}
 
       - name: Build and push eventhub
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: .
           file: docker/Dockerfile
@@ -41,9 +44,11 @@ jobs:
           tags: |
             ${{ env.REGISTRY }}/eventhub:${{ steps.meta.outputs.tag }}
             ${{ env.REGISTRY }}/eventhub:ift
+          provenance: false
+          sbom: false
 
       - name: Build and push traefik-coraza
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: docker/traefik
           file: docker/traefik/Dockerfile
@@ -51,9 +56,11 @@ jobs:
           tags: |
             ${{ env.REGISTRY }}/traefik-coraza:${{ steps.meta.outputs.tag }}
             ${{ env.REGISTRY }}/traefik-coraza:ift
+          provenance: false
+          sbom: false
 
       - name: Build and push fallback
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: docker/fallback
           file: docker/fallback/Dockerfile
@@ -61,9 +68,11 @@ jobs:
           tags: |
             ${{ env.REGISTRY }}/fallback:${{ steps.meta.outputs.tag }}
             ${{ env.REGISTRY }}/fallback:ift
+          provenance: false
+          sbom: false
 
       - name: Build and push bot-emulator
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v5
         with:
           context: .
           file: test/emulate_users/Dockerfile
@@ -71,6 +80,8 @@ jobs:
           tags: |
             ${{ env.REGISTRY }}/bot-emulator-users:${{ steps.meta.outputs.tag }}
             ${{ env.REGISTRY }}/bot-emulator-users:ift
+          provenance: false
+          sbom: false
 
       - name: Deploy core on IFT via SSH
         uses: appleboy/ssh-action@v0.1.5