-
Notifications
You must be signed in to change notification settings - Fork 0
90 lines (81 loc) · 2.8 KB
/
ci-generic.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
name: "Continuous Integration - Generic"
on:
workflow_call:
inputs:
docker-image-repo:
description: Docker image repository. Default -> GitHub repository owner/organisation.
type: string
required: false
default: ${{ github.repository_owner }}
docker-image-name:
description: Docker image name. Default -> GitHub repository name.
type: string
required: false
default: ${{ github.event.repository.name }}
version:
type: string
required: false
description: Semvers string. If empty, the ref/tag will be used (if on.tag trigger).
default: ''
upload-sarif-to-security:
type: boolean
required: false
description: Upload Sarif reports to Github Security dashboard
default: false
chekov-linter-enabled:
type: boolean
required: false
description: Run Chekov Linter
default: true
run-frank-till-healthy-enabled:
type: boolean
required: false
description: Run Frank till the health endpoints returns 'HEALTHY'
default: true
secrets:
token:
required: false
outputs:
image-id:
value: ${{ jobs.docker-ci.outputs.image-id }}
image-digest:
value: ${{ jobs.docker-ci.outputs.image-digest }}
image-metadata:
value: ${{ jobs.docker-ci.outputs.image-metadata }}
jobs:
update-buildinfo:
runs-on: ubuntu-latest
permissions:
contents: read
steps:
- uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
with:
disable-sudo: true
egress-policy: audit
allowed-endpoints: >
github.com:443
- name: Checkout
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 #4.1.7
- name: Update Instance BuildInfo.properties
uses: wearefrank/ci-cd-templates/update-buildinfo@main
with:
path: src/main/resources/BuildInfo.properties
version: ${{ inputs.version }}
- name: Upload Instance BuildInfo.properties
uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 #4.4.0
with:
name: pre-build-instance-buildinfo
path: ./*/main/resources/BuildInfo.properties
retention-days: 1
docker-ci:
uses: wearefrank/ci-cd-templates/.github/workflows/docker-ci-generic.yml@main
needs: update-buildinfo
secrets:
token: ${{ secrets.token }}
with:
version: ${{ inputs.version }}
docker-image-repo: ${{ inputs.docker-image-repo }}
docker-image-name: ${{ inputs.docker-image-name }}
upload-sarif-to-security: false
chekov-linter-enabled: ${{ inputs.chekov-linter-enabled }}
run-frank-till-healthy-enabled: ${{ inputs.run-frank-till-healthy-enabled }}