image-diff.yaml

name: Diff Images

on:
  workflow_dispatch:
  pull_request:
    branches: ["main"]

concurrency: 
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  diff:
    runs-on: distroless-ci-large-ubuntu-20.04 # custom runner most compatible with debian 11
    steps:
      - uses: actions/checkout@v4
      - name: Set up Go
        uses: actions/setup-go@v5
        with:
          go-version: '1.21'
      - uses: actions/cache@v4
        with:
          path: |
            ~/.cache/bazel-repo
          key: bazel-cache-deps-ci1-${{ github.sha }}
          restore-keys: |
            bazel-cache-deps-ci1-${{ github.sha }}
            bazel-cache-deps-ci1-
      - name: Install Deps
        run: |
            go install github.com/google/go-containerregistry/cmd/crane@main
            go install github.com/reproducible-containers/diffoci/cmd/diffoci@master
            go install filippo.io/mkcert@master
            sudo curl -fsSL "https://github.com/project-zot/zot/releases/download/v2.0.2-rc2/zot-linux-amd64-minimal" > /usr/local/bin/zot
            sudo chmod +x /usr/local/bin/zot
      - name: Diff All Images
        id: diff
        run: |
          ./private/tools/diff.bash \
            --query-bazel --registry-spawn-https \
            --head-ref ${{ github.head_ref }} \
            --base-ref ${{ github.event.pull_request.base.ref }} \
            --set-github-output-on-diff \
            --jobs $(nproc --all) \
            --errors ./error.log \
            --report ./report.log

      - uses: actions/upload-artifact@v4
        id: report
        with:
            name: "Report"
            path: |
              ./error.log
              ./report.log

      - uses: peter-evans/find-comment@v3
        id: fc
        with:
          issue-number: ${{ github.event.pull_request.number }}
          comment-author: 'github-actions[bot]'
          body-includes: 🛎️ Image difference

      - name: Create or update comment
        if: ${{ steps.diff.outputs.had_diff }}
        uses: peter-evans/create-or-update-comment@v4
        with:
          comment-id: ${{ steps.fc.outputs.comment-id }}
          issue-number: ${{ github.event.pull_request.number }}
          body: |
            🛎️ Image difference
            This pull request has changed the contents of some images.
            See the report ${{steps.report.outputs.artifact-url}}
          edit-mode: replace