114 lines
2.8 KiB
YAML
114 lines
2.8 KiB
YAML
name: Docker (tags)
|
|
|
|
on:
|
|
push:
|
|
tags:
|
|
- '*'
|
|
|
|
env:
|
|
IMAGE: code.foss.global/host.today/ht-docker-node:szci
|
|
NPMCI_COMPUTED_REPOURL: https://${{gitea.repository_owner}}:${{secrets.GITEA_TOKEN}}@gitea.lossless.digital/${{gitea.repository}}.git
|
|
# NPMCI_TOKEN_NPM: ${{secrets.NPMCI_TOKEN_NPM}}
|
|
# NPMCI_TOKEN_NPM2: ${{secrets.NPMCI_TOKEN_NPM2}}
|
|
# NPMCI_GIT_GITHUBTOKEN: ${{secrets.NPMCI_GIT_GITHUBTOKEN}}
|
|
# NPMCI_LOGIN_DOCKER_GITEA: ${{ github.server_url }}|${{ gitea.repository_owner }}|${{ secrets.GITEA_TOKEN }}
|
|
NPMCI_LOGIN_DOCKER_DOCKERREGISTRY: ${{ secrets.NPMCI_LOGIN_DOCKER_DOCKERREGISTRY }}
|
|
|
|
jobs:
|
|
security:
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: ${{ env.IMAGE }}
|
|
continue-on-error: true
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- name: Prepare
|
|
run: |
|
|
pnpm install -g pnpm
|
|
pnpm install -g @ship.zone/szci
|
|
szci npm prepare
|
|
|
|
- name: Audit production dependencies
|
|
run: |
|
|
szci command npm config set registry https://registry.npmjs.org
|
|
szci command pnpm audit --audit-level=high --prod
|
|
continue-on-error: true
|
|
|
|
- name: Audit development dependencies
|
|
run: |
|
|
szci command npm config set registry https://registry.npmjs.org
|
|
szci command pnpm audit --audit-level=high --dev
|
|
continue-on-error: true
|
|
|
|
test:
|
|
needs: security
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: ${{ env.IMAGE }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- name: Prepare
|
|
run: |
|
|
pnpm install -g pnpm
|
|
pnpm install -g @ship.zone/szci
|
|
szci npm prepare
|
|
|
|
- name: Test stable
|
|
run: |
|
|
szci node install stable
|
|
szci npm install
|
|
szci npm test
|
|
|
|
- name: Test build
|
|
run: |
|
|
szci node install stable
|
|
szci npm install
|
|
szci command npm run build
|
|
|
|
release:
|
|
needs: test
|
|
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: code.foss.global/host.today/ht-docker-dbase:szci
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- name: Prepare
|
|
run: |
|
|
pnpm install -g pnpm
|
|
pnpm install -g @git.zone/tsdocker@latest
|
|
|
|
- name: Login to registries
|
|
run: tsdocker login
|
|
|
|
- name: List discovered Dockerfiles
|
|
run: tsdocker list
|
|
|
|
- name: Build all images
|
|
run: tsdocker build
|
|
|
|
- name: Test images
|
|
run: tsdocker test
|
|
|
|
- name: Push to code.foss.global
|
|
run: tsdocker push code.foss.global
|
|
|
|
metadata:
|
|
needs: test
|
|
if: github.event_name == 'push' && startsWith(github.ref, 'refs/tags/')
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: ${{ env.IMAGE }}
|
|
|
|
steps:
|
|
- uses: actions/checkout@v3
|
|
|
|
- name: Trigger
|
|
run: szci trigger
|