With my own container registry
Before, I mistakenly thought that merge requests ran with the
credentials of graphviz/graphviz, now I see they only run with the
credentials of the source repo (markhnsn/graphviz). So it's safe to run
this on any master branch, even forks.
only:
refs:
# Only master should be pushed to :latest, not unmerged merge-requests.
- - master@graphviz/graphviz
+ # It's ok for this to run on other repos (not just graphviz/graphviz) as
+ # they have their own container registries.
+ - master
script:
- docker pull $CI_REGISTRY_IMAGE/$IMAGE:$CI_COMMIT_SHA
# Re-tag, push to :latest tag