Исправить передачу исходников в CI-контейнеры

.gitea/workflows/docker-build.yaml

@@ -25,21 +25,25 @@ jobs:
       - name: Получить исходный код
         uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
 
+      - name: Проверить запуск CI-контейнеров без bind mount
+        run: bash scripts/test-run-ci-container.sh
+
       - name: Backend unit и component tests
-        run: >-
-          docker run --rm
-          -v "${{ github.workspace }}/backend:/workspace"
-          -w /workspace
-          "${{ env.MAVEN_IMAGE }}"
-          mvn -Dapi.version=1.44 '-Dtest=!*IntegrationTest' test
+        run: |
+          bash scripts/run-ci-container.sh \
+            backend \
+            "${{ env.MAVEN_IMAGE }}" \
+            -- \
+            mvn -Dapi.version=1.44 '-Dtest=!*IntegrationTest' test
 
       - name: Frontend static и unit tests
-        run: >-
-          docker run --rm
-          -v "${{ github.workspace }}/frontend:/workspace"
-          -w /workspace
-          "${{ env.NODE_IMAGE }}"
-          sh -c "npm ci && npm run check"
+        run: |
+          bash scripts/run-ci-container.sh \
+            frontend \
+            "${{ env.NODE_IMAGE }}" \
+            --copy backend /backend \
+            -- \
+            sh -c "npm ci && npm run check"
 
       - name: Проверить Docker Compose
         env:
@@ -146,6 +150,9 @@ jobs:
       BACKEND_REF: ${{ env.REGISTRY }}/${{ env.BACKEND_IMAGE }}@${{ needs.build-and-push-backend.outputs.digest }}
       FRONTEND_REF: ${{ env.REGISTRY }}/${{ env.FRONTEND_IMAGE }}@${{ needs.build-and-push-frontend.outputs.digest }}
     steps:
+      - name: Получить исходный код
+        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+
       - name: Войти в Container Registry
         uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
         with:
@@ -154,20 +161,24 @@ jobs:
           password: ${{ secrets.ZUEV_TOKEN }}
 
       - name: Проверить backend на HIGH и CRITICAL уязвимости
-        run: >-
-          docker run --rm
-          -v "$HOME/.docker:/root/.docker:ro"
-          "${{ env.TRIVY_IMAGE }}"
-          image --scanners vuln --exit-code 1 --severity HIGH,CRITICAL --ignore-unfixed
-          "$BACKEND_REF"
+        run: |
+          bash scripts/run-ci-container.sh \
+            "$HOME/.docker" \
+            "${{ env.TRIVY_IMAGE }}" \
+            --env DOCKER_CONFIG=/workspace \
+            -- \
+            image --scanners vuln --exit-code 1 --severity HIGH,CRITICAL --ignore-unfixed \
+            "$BACKEND_REF"
 
       - name: Проверить frontend на HIGH и CRITICAL уязвимости
-        run: >-
-          docker run --rm
-          -v "$HOME/.docker:/root/.docker:ro"
-          "${{ env.TRIVY_IMAGE }}"
-          image --scanners vuln --exit-code 1 --severity HIGH,CRITICAL --ignore-unfixed
-          "$FRONTEND_REF"
+        run: |
+          bash scripts/run-ci-container.sh \
+            "$HOME/.docker" \
+            "${{ env.TRIVY_IMAGE }}" \
+            --env DOCKER_CONFIG=/workspace \
+            -- \
+            image --scanners vuln --exit-code 1 --severity HIGH,CRITICAL --ignore-unfixed \
+            "$FRONTEND_REF"
 
   deploy-to-k8s:
     name: Развернуть проверенные digests