--- ######################### ######################### ## Deploy Docker Image ## ######################### ######################### # # Documentation: # https://help.github.com/en/articles/workflow-syntax-for-github-actions # ####################################### # Start the job on all push to master # ####################################### ############################# # Start the job on all push # ############################# on: push: branches-ignore: [master] pull_request: branches-ignore: [ ] ############### # Set the Job # ############### jobs: build: # Name the Job name: Deploy Docker Image - DEV - SLIM # Set the agent to run on runs-on: ubuntu-latest # Prevent duplicate run from happening when a forked push is committed if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name != github.repository ################## # Load all steps # ################## steps: ########################## # Checkout the code base # ########################## - name: Checkout Code uses: actions/checkout@v2.3.4 with: # Full git history is needed to get a proper list # of changed files within `super-linter` fetch-depth: 0 ######################## # Get the current date # ######################## - name: Get current date run: echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> ${GITHUB_ENV} ######################## # Setup Docker build X # ######################## - name: Setup BuildX uses: docker/setup-buildx-action@v1.3.0 ################ # Docker cache # ################ - name: Cache Docker layers uses: actions/cache@v2 with: path: /tmp/.buildx-cache key: ${{ runner.os }}-single-buildx-slim restore-keys: | ${{ runner.os }}-single-buildx ########################################### # Build and Push containers to registries # ########################################### - name: Build Docker image - SLIM uses: docker/build-push-action@v2.6.1 with: context: . file: ./Dockerfile-slim build-args: | BUILD_DATE=${{ env.BUILD_DATE }} BUILD_REVISION=${{ github.sha }} BUILD_VERSION=${{ github.sha }} load: true push: false tags: | ghcr.io/github/super-linter:slim-${{ github.sha }} ghcr.io/github/super-linter:slim-test cache-from: type=local,src=/tmp/.buildx-cache cache-to: type=local,dest=/tmp/.buildx-cache-new # Temp fix # https://github.com/docker/build-push-action/issues/252 # https://github.com/moby/buildkit/issues/1896 ############# # Fix Cache # ############# - name: Move cache run: | rm -rf /tmp/.buildx-cache mv /tmp/.buildx-cache-new /tmp/.buildx-cache ######################################## # Validates the metadata docker labels # ######################################## - name: Run Docker label test cases shell: bash run: .automation/validate-docker-labels.sh "slim" ######################################## # Edit action.yml for test local build # ######################################## - name: Edit an action.yml file for test local build run: | sed -i "s/super-linter:.*/super-linter:slim-${GITHUB_SHA}'/g" action.yml ###################### # Gather information # ###################### - name: Gather information about the runtime environment shell: bash run: | make info ########################## # Test in action context # ########################## # Test the built image in the actions context. # Not the container directly, and not using RUN_LOCAL=true - name: Test the local action uses: ./ env: ACTIONS_RUNNER_DEBUG: true ERROR_ON_MISSING_EXEC_BIT: true VALIDATE_ALL_CODEBASE: false GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} ############################################################### # Fix file and dir ownership. # # Workaround for https://github.com/actions/runner/issues/434 # ############################################################### - name: Fix file and directory ownership shell: bash run: | sudo chown -R "$(id -u)":"$(id -g)" "$(pwd)" ################## # Run test cases # ################## - name: Run the test suite shell: bash run: | make IMAGE=slim test ########################## # Codacy Coverage Report # ########################## - name: Upload the code coverage report uses: codacy/codacy-coverage-reporter-action@1.0.1 # Dependabot does not have priv to see the secret, so will # fail opn bump jobs... continue-on-error: true with: project-token: ${{ secrets.CODACY_PROJECT_TOKEN }} coverage-reports: test/reports/cobertura/runTests.sh/cobertura.xml ##################################### # Run Linter against Test code base # ##################################### - name: Run Test Cases - SLIM shell: bash run: | docker run \ -e RUN_LOCAL=true \ -e TEST_CASE_RUN=true \ -e ANSIBLE_DIRECTORY=.automation/test/ansible \ -e ACTIONS_RUNNER_DEBUG=true \ -e ERROR_ON_MISSING_EXEC_BIT=true \ -v ${GITHUB_WORKSPACE}:/tmp/lint \ ghcr.io/github/super-linter:slim-${GITHUB_SHA} ######################################### # Clean code base to run against it all # ######################################### - name: Clean Test code base for additional testing shell: bash run: .automation/clean-code-base-for-tests.sh ############################################ # Run Linter against ALL cleaned code base # ############################################ - name: Run against all code base - SLIM shell: bash run: | docker run \ -e RUN_LOCAL=true \ -e OUTPUT_DETAILS=detailed \ -e ACTIONS_RUNNER_DEBUG=true \ -e ERROR_ON_MISSING_EXEC_BIT=true \ -v ${GITHUB_WORKSPACE}:/tmp/lint \ ghcr.io/github/super-linter:slim-${GITHUB_SHA}