ci.yml

name: ci

on:
  push:
    branches:
      - 'main'
      - 'gcp-artifact-registry'
    tags:
      - 'v*'
  pull_request:
    branches:
      - 'main'

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  extension-ci:
    uses: steadybit/extension-kit/.github/workflows/reusable-extension-ci.yml@gcp-artifact-registry
    with:
      go_version: '1.22'
      build_linux_packages: true
      VERSION_BUMPER_APPID: ${{ vars.GH_APP_STEADYBIT_APP_ID }}
      gcp_project_location: europe-west1
      gcp_project_id: p-artifact-registries-5m4f
      gcp_project_sa: project-service-account@p-artifact-registries-5m4f.iam.gserviceaccount.com
      gcp_workload_identity_provider: projects/1020387340820/locations/global/workloadIdentityPools/github-pool/providers/github-prvdr
    secrets:
      SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
      PAT_TOKEN_EXTENSION_DEPLOYER: ${{ secrets.PAT_TOKEN_EXTENSION_DEPLOYER }}
      MAVEN_GPG_PRIVATE_KEY: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
      MAVEN_GPG_PRIVATE_KEY_PASSWORD: ${{ secrets.MAVEN_GPG_PRIVATE_KEY_PASSWORD }}
      PAT_TOKEN_GORELEASER: ${{ secrets.PAT_TOKEN }}
      STEADYBIT_ARTIFACT_SERVER_USERNAME: ${{ secrets.STEADYBIT_ARTIFACT_SERVER_USERNAME }}
      STEADYBIT_ARTIFACT_SERVER_PASSWORD: ${{ secrets.STEADYBIT_ARTIFACT_SERVER_PASSWORD }}
      SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
      VERSION_BUMPER_SECRET: ${{ secrets.GH_APP_STEADYBIT_PRIVATE_KEY }}