Quickly test the released binaries and perform the release #4
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Test and Release | |
on: | |
pull_request: | |
types: | |
- opened | |
- reopened | |
- synchronize | |
workflow_dispatch: | |
jobs: | |
test: | |
runs-on: ubuntu-latest | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4 | |
- name: Hub Login | |
uses: docker/login-action@v2 | |
with: | |
username: ${{ secrets.DOCKER_USER }} | |
password: ${{ secrets.DOCKER_PAT }} | |
- name: Prepare scout binary | |
run: | | |
tar -xf dist/docker-scout_*_linux_amd64.tar.gz -C . | |
chmod +x docker-scout | |
- name: TEST docker scout version | |
run: ./docker-scout version | |
- name: TEST docker scout quickview | |
run: ./docker-scout quickview alpine:latest | |
- name: TEST docker scout cves | |
run: ./docker-scout cves docker/scout-demo-service:main | |
- name: Set up QEMU | |
uses: docker/setup-qemu-action@v3 | |
- name: Set up Docker Buildx | |
uses: docker/setup-buildx-action@v3 | |
- name: Build | |
uses: docker/build-push-action@v5 | |
with: | |
context: https://github.com/docker/scout-demo-service.git#fix-all-cves | |
push: false | |
load: true | |
tags: docker/scout-demo-service:fix | |
- name: TEST docker scout compare | |
run: ./docker-scout compare registry://docker/scout-demo-service:main --to local://docker/scout-demo-service:fix | |
release: | |
if: startsWith(github.head_ref, 'release/v') | |
permissions: | |
contents: write | |
runs-on: ubuntu-latest | |
needs: test | |
steps: | |
- name: Checkout | |
uses: actions/checkout@v4 | |
with: | |
fetch-depth: 0 | |
ref: main | |
- name: Tag name | |
uses: mad9000/actions-find-and-replace-string@2 | |
id: tagname | |
with: | |
source: ${{ github.head_ref }} | |
find: 'release/' | |
replace: '' | |
- name: Merge and Tag | |
run: | | |
git config --unset-all http.https://github.com/.extraheader | |
git config --global user.email "${GITHUB_ACTOR}@users.noreply.github.com" | |
git config --global user.name "${GITHUB_ACTOR}" | |
git merge --ff-only origin/${{ github.head_ref }} | |
git tag ${{ steps.tagname.outputs.value }} | |
git push https://${GITHUB_ACTOR}:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}.git HEAD:main --tags |