2022-07-13 08:04:46 -04:00
|
|
|
name: Build micro service
|
2022-06-15 04:50:46 -04:00
|
|
|
description: Build and upload a container image for a Constellation micro-service
|
|
|
|
inputs:
|
|
|
|
name:
|
2022-09-14 09:14:26 -04:00
|
|
|
description: "Name of the micro-service"
|
2022-06-15 04:50:46 -04:00
|
|
|
required: true
|
2022-06-15 05:15:33 -04:00
|
|
|
projectVersion:
|
2022-09-14 09:14:26 -04:00
|
|
|
description: "Version of the micro-service"
|
|
|
|
default: "0.0.0"
|
2022-06-15 05:15:33 -04:00
|
|
|
required: false
|
2022-06-15 04:50:46 -04:00
|
|
|
dockerfile:
|
2022-09-14 09:14:26 -04:00
|
|
|
description: "Path to the services Dockerfile"
|
2022-06-15 04:50:46 -04:00
|
|
|
required: true
|
|
|
|
pushTag:
|
2022-09-14 09:14:26 -04:00
|
|
|
description: "Use this image tag"
|
2022-06-15 04:50:46 -04:00
|
|
|
required: false
|
|
|
|
githubToken:
|
2022-09-14 09:14:26 -04:00
|
|
|
description: "GitHub authorization token"
|
2022-06-15 04:50:46 -04:00
|
|
|
required: true
|
2022-10-21 09:19:51 -04:00
|
|
|
cosignPublicKey:
|
|
|
|
description: "Cosign public key"
|
|
|
|
required: false
|
|
|
|
cosignPrivateKey:
|
|
|
|
description: "Cosign private key"
|
|
|
|
required: false
|
|
|
|
cosignPassword:
|
|
|
|
description: "Password for Cosign private key"
|
|
|
|
required: false
|
2022-06-15 04:50:46 -04:00
|
|
|
|
2022-09-14 09:14:26 -04:00
|
|
|
# Linux runner only (Docker required)
|
2022-07-13 08:04:46 -04:00
|
|
|
runs:
|
2022-06-15 04:50:46 -04:00
|
|
|
using: "composite"
|
|
|
|
steps:
|
2022-07-14 09:45:04 -04:00
|
|
|
- name: Determine pseudo version
|
|
|
|
id: pseudo-version
|
|
|
|
uses: ./.github/actions/pseudo_version
|
|
|
|
|
2022-06-15 04:50:46 -04:00
|
|
|
- name: Docker metadata
|
|
|
|
id: meta
|
2023-01-18 11:04:46 -05:00
|
|
|
uses: docker/metadata-action@507c2f2dc502c992ad446e3d7a5dfbe311567a96 # v4.3.0
|
2022-06-15 04:50:46 -04:00
|
|
|
with:
|
|
|
|
images: |
|
|
|
|
ghcr.io/${{ github.repository }}/${{ inputs.name }}
|
|
|
|
tags: |
|
|
|
|
type=raw,value=latest,enable={{is_default_branch}}
|
|
|
|
type=raw,value=${{ inputs.pushTag }},enable=${{ '' != inputs.pushTag }}
|
2022-08-03 10:01:36 -04:00
|
|
|
type=raw,value=${{ steps.pseudo-version.outputs.pseudoVersion }},enable=${{ '' != steps.pseudo-version.outputs.pseudoVersion }}
|
2022-06-15 04:50:46 -04:00
|
|
|
type=ref,event=branch
|
2022-11-30 11:20:16 -05:00
|
|
|
|
2022-06-15 04:50:46 -04:00
|
|
|
- name: Log in to the Container registry
|
|
|
|
id: docker-login
|
2022-10-12 12:05:58 -04:00
|
|
|
uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a # tag=v2.1.0
|
2022-06-15 04:50:46 -04:00
|
|
|
with:
|
|
|
|
registry: ghcr.io
|
|
|
|
username: ${{ github.actor }}
|
|
|
|
password: ${{ inputs.githubToken }}
|
|
|
|
|
|
|
|
- name: Build and push container image
|
|
|
|
id: build-micro-service
|
2023-01-18 11:04:46 -05:00
|
|
|
uses: docker/build-push-action@37abcedcc1da61a57767b7588cb9d03eb57e28b3 # v3.3.0
|
2022-06-15 04:50:46 -04:00
|
|
|
with:
|
|
|
|
context: .
|
|
|
|
file: ${{ inputs.dockerfile }}
|
|
|
|
target: release
|
|
|
|
push: true
|
|
|
|
tags: ${{ steps.meta.outputs.tags }}
|
2022-06-15 05:15:33 -04:00
|
|
|
build-args: |
|
|
|
|
PROJECT_VERSION=${{ inputs.projectVersion }}
|
2022-10-21 09:19:51 -04:00
|
|
|
|
|
|
|
- name: Generate SBOM
|
2023-01-18 04:15:58 -05:00
|
|
|
if: inputs.cosignPublicKey != '' && inputs.cosignPrivateKey != '' && inputs.cosignPassword != ''
|
2022-10-21 09:19:51 -04:00
|
|
|
uses: ./.github/actions/container_sbom
|
|
|
|
with:
|
|
|
|
containerReference: ghcr.io/${{ github.repository }}/${{ inputs.name }}@${{ steps.build-micro-service.outputs.digest }}
|
|
|
|
cosignPublicKey: ${{ inputs.cosignPublicKey }}
|
|
|
|
cosignPrivateKey: ${{ inputs.cosignPrivateKey }}
|
|
|
|
cosignPassword: ${{ inputs.cosignPassword }}
|