mirror of
https://github.com/bitwarden/self-host.git
synced 2026-06-28 06:15:46 +00:00
Prevents build-bitwarden-lite from overwriting existing production container image tags by checking both GHCR and ACR registries. Changes: - Check both GHCR and ACR before building - Distinguish 'not found' from 'error' to fail closed - Only validates version tags (X.Y.Z format) - Skips check for dev/branch tags to allow rebuilds - Fails with clear error if tag exists or check fails Security: Prevents silent failures from registry errors, rate limits, auth failures, or network timeouts from allowing overwrites. This provides defense-in-depth protection against tag overwrites from any workflow source, regardless of how it was triggered.