blob: 975fda0cfa02072b9b55bcc92d216b80a35aeaec (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
|
name: "lint, build and push"
on:
schedule:
- cron: "49 9 * * SUN"
push:
branches: [ master ]
pull_request:
# Variables: https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/store-information-in-variables#default-environment-variables + https://forgejo.org/docs/latest/user/actions/#env-1
jobs:
lint:
steps:
- name: Checkout code
uses: actions/checkout@v4
- name: Run Gitleaks
uses: docker://zricethezav/gitleaks:v8.19.3
with:
args: detect --no-git --verbose --source ${{ github.workspace }}
- name: Run hadolint
uses: docker://pipelinecomponents/hadolint:0.26.4
with:
args: hadolint Dockerfile
# - name: Run ShellCheck
# uses: sudo-bot/action-shellcheck@latest
# with:
# cli-args: "shell.sh"
- name: Send notification on error
uses: dawidd6/action-send-mail@v3
if: failure()
with:
connection_url: smtp://docker10.mgrote.net:1025
secure: false
ignore_cert: true
to: michael.grote@posteo.de
from: Gitea Actions <gitea@mgrote.net>
subject: "CI Error in ${{ env.GITHUB_REPOSITORY }}"
body: "Job of ${{ env.github.repository }} failed!"
build:
needs: [gitleaks, hadolint] # shellcheck
steps:
- uses: https://github.com/actions/checkout@v4
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
# - name: Login to Docker Hub
# uses: docker/login-action@v3
# with:
# username: ${{ secrets.DOCKERHUB_USERNAME }}
# password: ${{ secrets.DOCKERHUB_TOKEN }}
- name: Extract repository name
id: meta
run: |
echo REPO_NAME=$(echo ${GITHUB_REPOSITORY} | awk -F"/" '{print $2}') >> $GITHUB_OUTPUT
- name: Extract branch name
shell: bash
run: echo "REPO_BRANCH=${GITHUB_HEAD_REF:-${GITHUB_REF#refs/heads/}}" >> $GITHUB_OUTPUT
id: extract_branch
- name: Build and push Docker image
uses: https://github.com/docker/build-push-action@v6
with:
context: .
file: ./Dockerfile
push: true
tags: "registry.mgrote.net/${{ steps.meta.outputs.REPO_NAME }}:latest,registry.mgrote.net/${{ steps.meta.outputs.REPO_NAME }}:${{ steps.extract_branch.outputs.REPO_BRANCH }}"
- name: Send notification on error
uses: dawidd6/action-send-mail@v3
if: failure()
with:
connection_url: smtp://docker10.mgrote.net:1025
secure: false
ignore_cert: true
to: michael.grote@posteo.de
from: Gitea Actions <gitea@mgrote.net>
subject: "CI Error in ${{ env.GITHUB_REPOSITORY }}"
body: Job of ${{ env.github.repository }} failed!
|