switch to gitea-actions
This commit is contained in:
parent
33f69e5628
commit
e6acf07e43
3 changed files with 78 additions and 73 deletions
78
.gitea/workflows/build.yaml
Normal file
78
.gitea/workflows/build.yaml
Normal file
|
|
@ -0,0 +1,78 @@
|
|||
name: "lint, build and push"
|
||||
on:
|
||||
schedule:
|
||||
- cron: "5 3 * * SUN"
|
||||
push:
|
||||
branches: [ master ]
|
||||
pull_request:
|
||||
|
||||
# Variables: https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables#default-environment-variables + https://forgejo.org/docs/latest/user/actions/#env-1
|
||||
|
||||
jobs:
|
||||
lint:
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
- name: Run Gitleaks
|
||||
uses: docker://zricethezav/gitleaks:v8.18.4
|
||||
with:
|
||||
args: detect --no-git --verbose --source ${{ github.workspace }}
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
- name: Run hadolint
|
||||
uses: docker://pipelinecomponents/hadolint:0.26.4
|
||||
with:
|
||||
args: hadolint Dockerfile
|
||||
# - name: Run ShellCheck
|
||||
# uses: sudo-bot/action-shellcheck@latest
|
||||
# with:
|
||||
# cli-args: "shell.sh"
|
||||
- name: Send notification on error
|
||||
uses: dawidd6/action-send-mail@v3
|
||||
if: failure()
|
||||
with:
|
||||
connection_url: smtp://docker10.mgrote.net:1025
|
||||
secure: false
|
||||
ignore_cert: true
|
||||
to: michael.grote@posteo.de
|
||||
from: Gitea Actions <gitea@mgrote.net>
|
||||
subject: "CI Error in ${{ env.GITHUB_REPOSITORY }}"
|
||||
body: "Job of ${{ env.github.repository }} failed!"
|
||||
|
||||
build:
|
||||
needs: [gitleaks, hadolint] # shellcheck
|
||||
steps:
|
||||
- uses: https://github.com/actions/checkout@v4
|
||||
- name: Set up Docker Buildx
|
||||
uses: docker/setup-buildx-action@v3
|
||||
# - name: Login to Docker Hub
|
||||
# uses: docker/login-action@v3
|
||||
# with:
|
||||
# username: ${{ secrets.DOCKERHUB_USERNAME }}
|
||||
# password: ${{ secrets.DOCKERHUB_TOKEN }}
|
||||
- name: Extract repository name
|
||||
id: meta
|
||||
run: |
|
||||
echo REPO_NAME=$(echo ${GITHUB_REPOSITORY} | awk -F"/" '{print $2}') >> $GITHUB_OUTPUT
|
||||
- name: Extract branch name
|
||||
shell: bash
|
||||
run: echo "REPO_BRANCH=${GITHUB_HEAD_REF:-${GITHUB_REF#refs/heads/}}" >> $GITHUB_OUTPUT
|
||||
id: extract_branch
|
||||
- name: Build and push Docker image
|
||||
uses: https://github.com/docker/build-push-action@v5
|
||||
with:
|
||||
context: .
|
||||
file: ./Dockerfile
|
||||
push: true
|
||||
tags: "registry.mgrote.net/${{ steps.meta.outputs.REPO_NAME }}:latest,registry.mgrote.net/${{ steps.meta.outputs.REPO_NAME }}:${{ steps.extract_branch.outputs.REPO_BRANCH }}"
|
||||
- name: Send notification on error
|
||||
uses: dawidd6/action-send-mail@v3
|
||||
if: failure()
|
||||
with:
|
||||
connection_url: smtp://docker10.mgrote.net:1025
|
||||
secure: false
|
||||
ignore_cert: true
|
||||
to: michael.grote@posteo.de
|
||||
from: Gitea Actions <gitea@mgrote.net>
|
||||
subject: "CI Error in ${{ env.GITHUB_REPOSITORY }}"
|
||||
body: Job of ${{ env.github.repository }} failed!
|
||||
|
|
@ -1,41 +0,0 @@
|
|||
---
|
||||
depends_on:
|
||||
- lint
|
||||
|
||||
clone:
|
||||
git:
|
||||
image: "woodpeckerci/plugin-git:2.5.2"
|
||||
settings:
|
||||
depth: 9999 # wird benötigt um die Commits zählen zu können
|
||||
lfs: false
|
||||
partial: false
|
||||
|
||||
steps:
|
||||
build_and_push: # damit dieser Step laufen kann muss das Repo in der Woodpecker-GUI "privilegiert" sein
|
||||
image: "docker:27.2.0"
|
||||
volumes:
|
||||
- /var/run/docker.sock:/var/run/docker.sock
|
||||
commands:
|
||||
# https://unix.stackexchange.com/questions/748633/error-multiple-platforms-feature-is-currently-not-supported-for-docker-driver
|
||||
- docker buildx create --use --platform=linux/amd64 --name multi-platform-builder
|
||||
- docker buildx inspect --bootstrap
|
||||
- |
|
||||
docker buildx build \
|
||||
--no-cache \
|
||||
--platform=linux/amd64 \
|
||||
--push \
|
||||
--tag registry.mgrote.net/${CI_REPO_NAME}:${CI_COMMIT_BRANCH} \
|
||||
--tag registry.mgrote.net/${CI_REPO_NAME}:latest \
|
||||
--label org.opencontainers.image.url=$CI_REPO_URL \
|
||||
--label org.opencontainers.image.source=$CI_REPO_URL \
|
||||
--label org.opencontainers.image.revision=$CI_COMMIT_SHA \
|
||||
--label org.opencontainers.image.created=$DATE \
|
||||
--file Dockerfile .
|
||||
when:
|
||||
- event: [push, pull_request, cron, manual]
|
||||
evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
|
||||
...
|
||||
|
||||
# händisch:
|
||||
# docker build . -t registry.mgrote.net/allzweckcontainer:latest
|
||||
# docker push registry.mgrote.net/allzweckcontainer:latest
|
||||
|
|
@ -1,32 +0,0 @@
|
|||
---
|
||||
steps:
|
||||
gitleaks:
|
||||
image: zricethezav/gitleaks:v8.18.4
|
||||
commands:
|
||||
- gitleaks detect --no-git --verbose --source $CI_WORKSPACE
|
||||
when:
|
||||
- event: [push, pull_request, cron]
|
||||
evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
|
||||
|
||||
hadolint:
|
||||
image: pipelinecomponents/hadolint:0.26.4
|
||||
commands:
|
||||
- hadolint Dockerfile
|
||||
when:
|
||||
- event: [push, pull_request, cron]
|
||||
evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
|
||||
|
||||
shellcheck:
|
||||
image: "koalaman/shellcheck-alpine:v0.10.0"
|
||||
commands:
|
||||
- |
|
||||
find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do
|
||||
if echo "$line" | grep -q "shell script"; then
|
||||
file_path=$(echo "$line" | awk -F':' '{print $1}')
|
||||
shellcheck "$file_path"
|
||||
fi
|
||||
done
|
||||
when:
|
||||
- event: [push, pull_request, cron]
|
||||
evaluate: 'CI_COMMIT_AUTHOR_EMAIL != "renovate@mgrote.net"'
|
||||
...
|
||||
Loading…
Reference in a new issue