Renovate Bot
3b44e49e5f
Co-authored-by: Renovate Bot <renovate@mgrote.net> Co-committed-by: Renovate Bot <renovate@mgrote.net>
91 lines
3 KiB
YAML
91 lines
3 KiB
YAML
name: "lint, build and push"
|
|
on:
|
|
schedule:
|
|
- cron: "17 6 * * SUN"
|
|
push:
|
|
branches: [ master ]
|
|
pull_request:
|
|
|
|
# Variables: https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables#default-environment-variables + https://forgejo.org/docs/latest/user/actions/#env-1
|
|
|
|
jobs:
|
|
lint:
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
- name: Run Gitleaks
|
|
uses: docker://zricethezav/gitleaks:v8.21.2
|
|
with:
|
|
args: detect --no-git --verbose --source ${{ github.workspace }}
|
|
- name: Run hadolint
|
|
uses: docker://pipelinecomponents/hadolint:0.27.0
|
|
with:
|
|
args: hadolint Dockerfile
|
|
# - name: Run ShellCheck
|
|
# uses: sudo-bot/action-shellcheck@latest
|
|
# with:
|
|
# cli-args: "shell.sh"
|
|
- name: Send notification
|
|
uses: dawidd6/action-send-mail@v4
|
|
if: failure()
|
|
with:
|
|
connection_url: smtp://docker10.mgrote.net:1025
|
|
secure: false
|
|
ignore_cert: true
|
|
to: michael.grote@posteo.de
|
|
from: Gitea Actions <gitea@mgrote.net>
|
|
subject: "CI ${{ job.status }} in ${{ github.repository }}"
|
|
body: |
|
|
Repo: ${{ github.repository }}
|
|
Job: ${{ github.action }}
|
|
Status: ${{ job.status }}
|
|
Source: ${{ github.head_ref }}
|
|
|
|
build:
|
|
needs: [gitleaks, hadolint] # shellcheck
|
|
steps:
|
|
- name: Checkout code
|
|
uses: actions/checkout@v4
|
|
- name: Extract repository name
|
|
id: name
|
|
run: |
|
|
echo REPO_NAME=$(echo ${GITHUB_REPOSITORY} | awk -F"/" '{print $2}') >> $GITHUB_OUTPUT
|
|
- name: Docker meta
|
|
id: meta
|
|
uses: docker/metadata-action@v5
|
|
with:
|
|
images: |
|
|
registry.mgrote.net/${{ steps.name.outputs.REPO_NAME }}
|
|
tags: |
|
|
type=raw,value=latest,enable={{is_default_branch}}
|
|
type=ref,event=branch
|
|
type=ref,event=pr
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
# - name: Login to Docker Hub
|
|
# uses: docker/login-action@v3
|
|
# with:
|
|
# username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
# password: ${{ secrets.DOCKERHUB_TOKEN }}
|
|
- name: Build and push Docker image
|
|
uses: https://github.com/docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
file: ./Dockerfile
|
|
push: true
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
- name: Send notification
|
|
uses: dawidd6/action-send-mail@v4
|
|
if: failure()
|
|
with:
|
|
connection_url: smtp://docker10.mgrote.net:1025
|
|
secure: false
|
|
ignore_cert: true
|
|
to: michael.grote@posteo.de
|
|
from: Gitea Actions <gitea@mgrote.net>
|
|
subject: "CI ${{ job.status }} in ${{ github.repository }}"
|
|
body: |
|
|
Repo: ${{ github.repository }}
|
|
Job: ${{ github.action }}
|
|
Status: ${{ job.status }}
|
|
Source: ${{ github.head_ref }}
|