Files
self-host/.github
brandonbiete 1821ae8710 [BRE-2049] Add tag existence check to prevent overwriting images (#528)
Prevents build-bitwarden-lite from overwriting existing production
container image tags by checking both GHCR and ACR registries.

Changes:
- Check both GHCR and ACR before building
- Distinguish 'not found' from 'error' to fail closed
- Only validates version tags (X.Y.Z format)
- Skips check for dev/branch tags to allow rebuilds
- Fails with clear error if tag exists or check fails

Security: Prevents silent failures from registry errors, rate limits,
auth failures, or network timeouts from allowing overwrites.

This provides defense-in-depth protection against tag overwrites
from any workflow source, regardless of how it was triggered.
2026-06-26 12:13:06 -04:00
..