From e79f41d2b9bf0077e20ff5d87ef037e142d54a1f Mon Sep 17 00:00:00 2001 From: Mikhail Lobanov Date: Wed, 14 Oct 2026 21:19:17 +0300 Subject: [PATCH] Run application container with read-only filesystem --- .gitea/workflows/ci.yaml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml index 102a3f0..131c81a 100644 --- a/.gitea/workflows/ci.yaml +++ b/.gitea/workflows/ci.yaml @@ -71,6 +71,7 @@ jobs: if docker run -d \ --name devops-platform \ --restart unless-stopped \ + --read-only \ -p 127.0.0.1:8000:8000 \ "$IMAGE"; then echo "New container started" @@ -79,6 +80,7 @@ jobs: docker run -d \ --name devops-platform \ --restart unless-stopped \ + --read-only \ -p 127.0.0.1:8000:8000 \ "$OLD_IMAGE" exit 1 @@ -104,6 +106,7 @@ jobs: docker run -d \ --name devops-platform \ --restart unless-stopped \ + --read-only \ -p 127.0.0.1:8000:8000 \ "$OLD_IMAGE" exit 1