Bump github/codeql-action from 2 to 3 #5
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build PR Image | |
| on: | |
| pull_request: | |
| types: [opened, synchronize, reopened, closed] | |
| jobs: | |
| build-application: | |
| name: Build and Push `Forem` | |
| runs-on: ubuntu-latest | |
| if: ${{ github.event_name != 'pull_request' || github.event.action != 'closed' }} | |
| outputs: | |
| tags: ${{ steps.meta.outputs.tags }} | |
| steps: | |
| - name: Checkout git repo | |
| uses: actions/checkout@v3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v2 | |
| - name: Generate UUID image name | |
| id: uuid | |
| run: echo "UUID_TAG_APP=forem-$(uuidgen --time)" >> $GITHUB_ENV | |
| - name: Docker metadata | |
| id: meta | |
| uses: docker/metadata-action@v4 | |
| with: | |
| images: registry.uffizzi.com/${{ env.UUID_TAG_APP }} | |
| tags: type=raw,value=30d | |
| - uses: actions/checkout@master | |
| - name: Create the .env file | |
| run: | | |
| cp .env_sample .env | |
| - name: Build and Push Image to registry.uffizzi.com ephemeral registry | |
| uses: docker/build-push-action@v2 | |
| with: | |
| push: true | |
| context: . | |
| tags: ${{ steps.meta.outputs.tags }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| file: ./Dockerfile | |
| target: uffizzi | |
| cache-from: type=gha | |
| cache-to: type=gha,mode=min | |
| render-compose-file: | |
| name: Render Docker Compose File | |
| # Pass output of this workflow to another triggered by `workflow_run` event. | |
| runs-on: ubuntu-latest | |
| needs: | |
| - build-application | |
| outputs: | |
| compose-file-cache-key: ${{ steps.hash.outputs.hash }} | |
| steps: | |
| - name: Checkout git repo | |
| uses: actions/checkout@v3 | |
| - name: Render Compose File | |
| run: | | |
| APP_IMAGE=$(echo ${{ needs.build-application.outputs.tags }}) | |
| export APP_IMAGE | |
| export UFFIZZI_URL=\$UFFIZZI_URL | |
| # Render simple template from environment variables. | |
| envsubst '$APP_IMAGE' < ./uffizzi/docker-compose.uffizzi.yml > docker-compose.rendered.yml | |
| cat docker-compose.rendered.yml | |
| - name: Upload Rendered Compose File as Artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: preview-spec | |
| path: docker-compose.rendered.yml | |
| retention-days: 2 | |
| - name: Upload PR Event as Artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: preview-spec | |
| path: ${{ github.event_path }} | |
| retention-days: 2 | |
| delete-preview: | |
| name: Call for Preview Deletion | |
| runs-on: ubuntu-latest | |
| if: ${{ github.event.action == 'closed' }} | |
| steps: | |
| # If this PR is closing, we will not render a compose file nor pass it to the next workflow. | |
| - name: Upload PR Event as Artifact | |
| uses: actions/upload-artifact@v3 | |
| with: | |
| name: preview-spec | |
| path: ${{ github.event_path }} | |
| retention-days: 2 |