mirror of
https://git.vectorsigma.ru/public/photoview.git
synced 2026-08-03 22:09:20 +00:00
dee3a151e9
Updated DB images in tests to align with the PROD setup Try to upload coverage only if tests were executed (passed or failed) - not skipped or canceled Added ESLint execution after UI tests with results exported to artifact Shifted scheduled run time from 00 minutes according to GitHub recommendations, as the 00 minutes of each hour is the busiest time Dynamically extract a list of langs from the repo to use them for CodeQL analysis instead of hardcoded ones Updated versions of several outdated actions Added the Autobuild step before CodeQL analysis for GO Added the Anchore dependency scan job, reporting to the Security tab. I can add steps to manage PR comments with the results, but I need a token to be provided by @viktorstrate Added the Hadolint Dockerfile scan job, reporting to the Security tab. I can add steps to manage PR comments with the results, but I need a token to be provided by @viktorstrate Implemented weekly rebuild of images for the latest commit in the master branch and the latest released tag. It will recreate images with the recent base image and 3rd-party dependencies even if there were no new pushes for a long time Added the Dockle container analysis job to be run on master and tag and validate just pushed images, reporting to the Security tab Added golangci-lint config to the /api folder, as a starting point and for local usage Added 2 weekly jobs for Dependabot: -- Maintain dependencies for GitHub Actions -- Maintain dependencies for Dockerfile --------- Co-authored-by: Konstantin Koval
70 lines
2.2 KiB
YAML
70 lines
2.2 KiB
YAML
name: Dependencies builds
|
|
|
|
on:
|
|
push:
|
|
branches: [master]
|
|
pull_request:
|
|
branches: [master]
|
|
schedule:
|
|
# At 23:18 every Wednesday, 2 hours before `photoview`. Details in https://docs.github.com/en/actions/writing-workflows/choosing-when-your-workflow-runs/events-that-trigger-workflows#schedule
|
|
- cron: '18 23 * * 3'
|
|
|
|
env:
|
|
IS_PUSHING_IMAGES: ${{ github.event_name != 'pull_request' && github.repository == 'photoview/photoview' }}
|
|
IS_CACHING: ${{ github.event_name == 'pull_request' }}
|
|
DOCKER_USERNAME: viktorstrate
|
|
DOCKER_IMAGE: viktorstrate/dependencies
|
|
DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
|
|
PLATFORMS: linux/amd64,linux/arm64,linux/arm/v7
|
|
|
|
jobs:
|
|
build:
|
|
name: Build Dependencies Image
|
|
runs-on: ubuntu-latest
|
|
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up QEMU
|
|
uses: docker/setup-qemu-action@v3
|
|
with:
|
|
platforms: ${{ env.PLATFORMS }}
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Docker Login
|
|
if: ${{ env.IS_PUSHING_IMAGES == 'true' }}
|
|
uses: docker/login-action@v3
|
|
with:
|
|
username: ${{ env.DOCKER_USERNAME }}
|
|
password: ${{ env.DOCKER_PASSWORD }}
|
|
|
|
- name: Docker meta
|
|
id: docker_meta
|
|
uses: docker/metadata-action@v5
|
|
with:
|
|
# list of Docker images to use as base name for tags
|
|
images: ${{ env.DOCKER_IMAGE }}
|
|
# Docker tags based on the following events/attributes
|
|
tags: |
|
|
type=raw,value=latest
|
|
type=sha
|
|
|
|
- name: Build and push
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: ./dependencies
|
|
platforms: ${{ env.PLATFORMS }}
|
|
pull: true
|
|
push: ${{ env.IS_PUSHING_IMAGES }}
|
|
tags: ${{ steps.docker_meta.outputs.tags }}
|
|
labels: ${{ steps.docker_meta.outputs.labels }}
|
|
annotations: ${{ steps.docker_meta.outputs.annotations }}
|
|
cache-from: ${{ ( env.IS_CACHING == 'true' && 'type=gha' ) || '' }}
|
|
cache-to: ${{ ( env.IS_CACHING == 'true' && 'type=gha,mode=max' ) || '' }}
|
|
no-cache: ${{ env.IS_CACHING != 'true' }}
|
|
sbom: true
|
|
provenance: mode=max
|