Bump ossf/scorecard-action from 2.3.1 to 2.4.0 #115
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: RIT Action Continuous Integration Test | |
| on: | |
| pull_request: | |
| push: | |
| branches: | |
| - main | |
| permissions: | |
| contents: read | |
| packages: write | |
| env: | |
| TEST_TAG: ${{ github.event.repository.name }}/rit:test | |
| LATEST_TAG: ghcr.io/rsksmart/${{ github.event.repository.name }}/rit | |
| jobs: | |
| build-push-rit-action-container-action: | |
| name: Test RIT Action docker container-action | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 60 | |
| steps: | |
| - name: Checkout | |
| id: checkout | |
| uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 | |
| - name: Docker meta | |
| id: meta | |
| uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81 # v5.5.1 | |
| with: | |
| images: | | |
| ${{ env.LATEST_TAG }} | |
| ${{ env.TEST_TAG }} | |
| - name: Setup Docker BuildX | |
| id: setup-buildx | |
| uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1 | |
| with: | |
| install: true | |
| driver-opts: network=host | |
| platforms: linux/amd64 | |
| - name: Build and export locally Docker | |
| uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0 | |
| with: | |
| context: container-action/ | |
| load: true | |
| tags: ${{ env.TEST_TAG }} | |
| - name: Test the RIT Container Action | |
| id: test-container | |
| env: | |
| INPUT_RSKJ_BRANCH: master | |
| INPUT_POWPEG_NODE_BRANCH: master | |
| INPUT_RIT_BRANCH: main | |
| INPUT_RIT_LOG_LEVEL: info | |
| run: | | |
| docker run \ | |
| --env GITHUB_OUTPUT="/github-output" \ | |
| --env INPUT_RSKJ_BRANCH="${{ env.INPUT_RSKJ_BRANCH }}" \ | |
| --env INPUT_POWPEG_NODE_BRANCH="${{ env.INPUT_POWPEG_NODE_BRANCH }}" \ | |
| --env INPUT_RIT_BRANCH="${{ env.INPUT_RIT_BRANCH }}" \ | |
| --env INPUT_RIT_LOG_LEVEL="${{ env.INPUT_RIT_LOG_LEVEL }}" \ | |
| -v "$GITHUB_OUTPUT:/github-output" \ | |
| --rm ${{ env.TEST_TAG }} | |
| - name: GitHub container registry login | |
| uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build the RIT Action Container Image | |
| uses: docker/build-push-action@5cd11c3a4ced054e52742c5fd54dca954e0edd85 # v6.7.0 | |
| with: | |
| context: container-action/ | |
| tags: ${{ env.LATEST_TAG }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| load: true | |
| push: true | |
| test-rit-action: | |
| needs: build-push-rit-action-container-action | |
| name: GitHub Actions Test | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 60 | |
| steps: | |
| - name: Checkout | |
| id: checkout | |
| uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 | |
| - name: Test RIT Action | |
| id: test-rit-action | |
| uses: ./container-action/ | |
| with: | |
| rskj-branch: master | |
| powpeg-node-branch: master | |
| - name: Print RIT Status and Message | |
| id: output | |
| run: | | |
| echo "RIT Status = ${{ steps.test-rit-action.outputs.status }}" | |
| echo "RIT Message = ${{ steps.test-rit-action.outputs.message }}" | |
| publish-rit-action-tag: | |
| needs: test-rit-action | |
| name: Publish RIT Action tag | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 60 | |
| if: github.ref == 'refs/heads/main' | |
| steps: | |
| - name: Checkout | |
| id: checkout | |
| uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 | |
| - name: Create GitHub Release | |
| uses: actions/create-release@0cb9c9b65d5d1901c1f53e5e66eaf4afd303e70e # v1.1.4 | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| with: | |
| tag_name: rootstock-integration-tests@v1 | |
| release_name: Release rootstock-integration-tests@v1 | |
| draft: false | |
| prerelease: false |