ci: fix notification tasks

ci: fix typo
ci: fix send always notification
2024-09-27 13:03:35 +02:00 · 2024-09-27 12:42:16 +02:00 · 2024-09-27 12:41:29 +02:00 · 2024-09-27 12:36:30 +02:00 · 2024-09-26 18:08:33 +00:00 · 2024-09-23 12:35:16 +02:00
4 changed files with 86 additions and 63 deletions
--- a/.gitea/workflows/build.yaml
+++ b/.gitea/workflows/build.yaml
@ -0,0 +1,82 @@
 name: "lint, build and push"
 on:
  schedule:
    - cron: "32 17 * * SUN"
  push:
    branches: [ master ]
  pull_request:
 # Variables: https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables#default-environment-variables + https://forgejo.org/docs/latest/user/actions/#env-1
 jobs:
  lint:
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
      - name: Run Gitleaks
        uses: docker://zricethezav/gitleaks:v8.19.3
        with:
          args: detect --no-git --verbose --source ${{ github.workspace }}
      - name: Run hadolint
        uses: docker://pipelinecomponents/hadolint:0.26.4
        with:
          args: hadolint Dockerfile
 #      - name: Run ShellCheck
 #        uses: sudo-bot/action-shellcheck@latest
 #        with:
 #          cli-args: "shell.sh"
      - name: Send notification
        uses: dawidd6/action-send-mail@v3
        if: failure()
        with:
          connection_url: smtp://docker10.mgrote.net:1025
          secure: false
          ignore_cert: true
          to: michael.grote@posteo.de
          from: Gitea Actions <gitea@mgrote.net>
          subject: "CI ${{ job.status }} in ${{ github.repository }}"
          body: |
            Repo: ${{ github.repository }}
            Job: ${{ github.action }}
            Status: ${{ job.status }}
  build:
    needs: [gitleaks, hadolint] # shellcheck
    steps:
      - uses: https://github.com/actions/checkout@v4
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
 #      - name: Login to Docker Hub
 #        uses: docker/login-action@v3
 #        with:
 #          username: ${{ secrets.DOCKERHUB_USERNAME }}
 #          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - name: Extract repository name
        id: meta
        run: |
          echo REPO_NAME=$(echo ${GITHUB_REPOSITORY} | awk -F"/" '{print $2}') >> $GITHUB_OUTPUT
      - name: Extract branch name
        shell: bash
        run: echo "REPO_BRANCH=${GITHUB_HEAD_REF:-${GITHUB_REF#refs/heads/}}" >> $GITHUB_OUTPUT
        id: extract_branch
      - name: Build and push Docker image
        uses: https://github.com/docker/build-push-action@v6
        with:
          context: .
          file: ./Dockerfile
          push: true
          tags: "registry.mgrote.net/${{ steps.meta.outputs.REPO_NAME }}:latest,registry.mgrote.net/${{ steps.meta.outputs.REPO_NAME }}:${{ steps.extract_branch.outputs.REPO_BRANCH }}"
      - name: Send notification
        uses: dawidd6/action-send-mail@v3
        if: failure()
        with:
          connection_url: smtp://docker10.mgrote.net:1025
          secure: false
          ignore_cert: true
          to: michael.grote@posteo.de
          from: Gitea Actions <gitea@mgrote.net>
          subject: "CI ${{ job.status }} in ${{ github.repository }}"
          body: |
            Repo: ${{ github.repository }}
            Job: ${{ github.action }}
            Status: ${{ job.status }}
--- a/.woodpecker/build.yml
+++ b/.woodpecker/build.yml
@ -1,19 +0,0 @@
 ---
 depends_on:
  - lint
 variables: # https://woodpecker-ci.org/docs/usage/advanced-usage
  - &VERSION 'v1.0.${CI_PIPELINE_NUMBER}' # wird für die Docker-Tags verwendet
 steps:
  selfhosted_push:
    image: "woodpeckerci/plugin-docker-buildx:3.0.1@sha256:c7ac0b01243466bef93863591940ce5eacf59759e9045433a6fc28d20c696d01"
    settings:
      dockerfile: Dockerfile
      repo: registry.mgrote.net/httpd
      registry: registry.mgrote.net
      tags:
        - *VERSION
        - ${CI_COMMIT_SHA:0:8}
        - ${CI_COMMIT_BRANCH}
        - latest
--- a/.woodpecker/lint.yml
+++ b/.woodpecker/lint.yml
@ -1,36 +0,0 @@
 ---
 steps:
  gitleaks:
    image: zricethezav/gitleaks:v8.18.2@sha256:eadfe256fa18d6a78a717abc9ed454c8e03865d1c46d627bca83977f4424901a
    commands:
      - gitleaks detect --no-git --verbose --source $CI_WORKSPACE
    when:
      - evaluate: 'CI_PIPELINE_EVENT == "push" && CI_COMMIT_BRANCH == CI_REPO_DEFAULT_BRANCH'
      - evaluate: 'CI_PIPELINE_EVENT == "pr"'
 #    when:
 #      branch:
 #        include: [master, master]
 #        exclude: [renovate/*]
  hadolint:
    image: pipelinecomponents/hadolint:0.26.0@sha256:7122937006c7a9bcbb78ce764d3c2f0092f183b843ad128bc9fd6ea918e22d5b
    commands:
      - hadolint Dockerfile
    when:
      event:
        exclude:
          - tag
  shellcheck:
    image: "koalaman/shellcheck-alpine:latest@sha256:7b0682c5786633fc075f69852e5c7521767e8dcb512c43cf8041b022bdc98198"
    commands:
      - |
        find . -type f -not -path './.git/*' -not -path './collections/*' -exec file {} \; | while IFS= read -r line; do
          if echo "$line" | grep -q "shell script"; then
            file_path=$(echo "$line" | awk -F':' '{print $1}')
            shellcheck "$file_path"
          fi
        done
 ...
--- a/12
+++ b/12
@ -1,10 +1,6 @@
-FROM httpd:2.4.58-alpine@sha256:5f3c87973b3e76601b2f4d8832d6075e272868815e4966d2e57823591f8da29f
+FROM httpd:2.4.62-alpine3.20
 # renovate: datasource=repology depName=alpine_3_19/curl versioning=loose
 ENV CURL_VERSION="8.5.0-r0"
 # renovate: datasource=repology depName=alpine_3_19/wget versioning=loose
 ENV WGET_VERSION="1.21.4-r0"
 # hadolint ignore=DL3018
 RUN apk add --no-cache \
-    curl="${CURL_VERSION}" \
+    curl \
-    wget="${WGET_VERSION}"
+    wget