Skip to content

Manage Writer resource to be consistent with Snowflake Loader #4

Manage Writer resource to be consistent with Snowflake Loader

Manage Writer resource to be consistent with Snowflake Loader #4

Workflow file for this run

name: CI
on:
push:
tags:
- '*'
pull_request:
jobs:
test:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- uses: coursier/cache-action@v6
- name: Set up JDK 11
uses: actions/setup-java@v1
with:
java-version: 11
- name: Check Scala formatting
run: sbt scalafmtCheckAll scalafmtSbtCheck
- name: Run tests
run: sbt test
publish_docker:
needs: test
if: github.ref_type == 'tag'
runs-on: ubuntu-latest
strategy:
matrix:
app:
- kafka
- pubsub
- kinesis
steps:
- name: Checkout Github
uses: actions/checkout@v2
- uses: coursier/cache-action@v6
- name: Set up JDK 11 for loader and streaming transformer
uses: actions/setup-java@v1
with:
java-version: 11
- name: Docker login
uses: docker/login-action@v1
with:
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}
- name: Stage the Docker build
run: sbt "project ${{ matrix.app}}" docker:stage
- name: Stage the Docker Distroless build
run: sbt "project ${{ matrix.app}}Distroless" docker:stage
- name: Docker metadata
id: meta
uses: docker/metadata-action@v3
with:
images: "snowplow/bigquery-loader-${{ matrix.app }}"
tags: |
type=raw,value=latest,enable=${{ !contains(github.ref_name, 'rc') }}
type=raw,value=latest-focal,enable=${{ !contains(github.ref_name, 'rc') }}
type=raw,value=${{ github.ref_name }}
type=raw,value=${{ github.ref_name }}-focal
flavor: |
latest=false
- name: Docker metadata distroless
id: metaDistroless
uses: docker/metadata-action@v3
with:
images: "snowplow/bigquery-loader-${{ matrix.app }}"
tags: |
type=raw,value=latest-distroless,enable=${{ !contains(github.ref_name, 'rc') }}
type=raw,value=${{ github.ref_name }}-distroless
flavor: |
latest=false
- name: Set up QEMU
uses: docker/setup-qemu-action@v1
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v1
- name: Push image
uses: docker/build-push-action@v2
with:
context: modules/${{ matrix.app }}/target/docker/stage
file: modules/${{ matrix.app }}/target/docker/stage/Dockerfile
platforms: linux/amd64,linux/arm64/v8
tags: ${{ steps.meta.outputs.tags }}
push: true
- name: Push distroless image
uses: docker/build-push-action@v2
with:
context: modules/distroless/${{ matrix.app }}/target/docker/stage
file: modules/distroless/${{ matrix.app }}/target/docker/stage/Dockerfile
platforms: linux/amd64,linux/arm64/v8
tags: ${{ steps.metaDistroless.outputs.tags }}
push: true
- name: Build local image, which is needed to run Snyk
# if: ${{ !contains(github.ref_name, 'rc') }} # TODO: uncomment before final release
run: sbt "project ${{ matrix.app }}Distroless" docker:publishLocal
- name: Run Snyk to check for vulnerabilities
uses: snyk/actions/docker@master
# if: ${{ !contains(github.ref_name, 'rc') }} # TODO: uncomment before final release
with:
image: "snowplow/bigquery-loader-${{ matrix.app }}:${{ github.ref_name }}-distroless"
args: "--app-vulns --org=99605b41-ca0f-42c9-a9ff-45c201a10a26"
command: monitor
env:
SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}