Skip to content

Commit be17f4a

Browse files
committed
ci: pipelines for various tools
1 parent 3640cb9 commit be17f4a

File tree

3 files changed

+126
-0
lines changed

3 files changed

+126
-0
lines changed
Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
name: Build Harbor garbage collector docker image
2+
3+
on:
4+
push:
5+
branches:
6+
- main
7+
8+
permissions:
9+
id-token: write
10+
11+
jobs:
12+
docker:
13+
runs-on: ubuntu-latest
14+
steps:
15+
-
16+
name: Checkout
17+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
18+
-
19+
name: Login to Stackable Harbor
20+
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
21+
with:
22+
registry: oci.stackable.tech
23+
username: robot$stackable+github-action-build
24+
password: ${{ secrets.HARBOR_ROBOT_STACKABLE_GITHUB_ACTION_BUILD_SECRET }}
25+
-
26+
name: Set up Cosign
27+
uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # tag=v3.3.0
28+
-
29+
name: Build and push
30+
id: build-and-push
31+
uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
32+
with:
33+
context: ./tools/harbor-garbage-collector
34+
file: ./tools/harbor-garbage-collector/Dockerfile
35+
push: true
36+
tags: oci.stackable.tech/stackable/harbor-garbage-collector:0.0.0-dev
37+
build-args: |
38+
REVISION=${{ github.sha }}
39+
VERSION=dev
40+
-
41+
name: Sign the published image
42+
run: cosign sign -y oci.stackable.tech/stackable/harbor-garbage-collector@${{ steps.build-and-push.outputs.digest }}
Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
name: Build SBOM browser docker image
2+
3+
on:
4+
push:
5+
branches:
6+
- main
7+
8+
permissions:
9+
id-token: write
10+
11+
jobs:
12+
docker:
13+
runs-on: ubuntu-latest
14+
steps:
15+
-
16+
name: Checkout
17+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
18+
-
19+
name: Login to Stackable Harbor
20+
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
21+
with:
22+
registry: oci.stackable.tech
23+
username: robot$stackable+github-action-build
24+
password: ${{ secrets.HARBOR_ROBOT_STACKABLE_GITHUB_ACTION_BUILD_SECRET }}
25+
-
26+
name: Set up Cosign
27+
uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # tag=v3.3.0
28+
-
29+
name: Build and push
30+
id: build-and-push
31+
uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
32+
with:
33+
context: ./tools/harbor-sbom-browser
34+
file: ./tools/harbor-sbom-browser/Dockerfile
35+
push: true
36+
tags: oci.stackable.tech/stackable/harbor-sbom-browser:0.0.0-dev
37+
build-args: |
38+
REVISION=${{ github.sha }}
39+
VERSION=dev
40+
-
41+
name: Sign the published image
42+
run: cosign sign -y oci.stackable.tech/stackable/harbor-sbom-browser@${{ steps.build-and-push.outputs.digest }}
Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
name: Build Nexus garbage collector docker image
2+
3+
on:
4+
push:
5+
branches:
6+
- main
7+
8+
permissions:
9+
id-token: write
10+
11+
jobs:
12+
docker:
13+
runs-on: ubuntu-latest
14+
steps:
15+
-
16+
name: Checkout
17+
uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
18+
-
19+
name: Login to Stackable Harbor
20+
uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
21+
with:
22+
registry: oci.stackable.tech
23+
username: robot$stackable+github-action-build
24+
password: ${{ secrets.HARBOR_ROBOT_STACKABLE_GITHUB_ACTION_BUILD_SECRET }}
25+
-
26+
name: Set up Cosign
27+
uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # tag=v3.3.0
28+
-
29+
name: Build and push
30+
id: build-and-push
31+
uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
32+
with:
33+
context: ./tools/nexus-garbage-collector
34+
file: ./tools/nexus-garbage-collector/Dockerfile
35+
push: true
36+
tags: oci.stackable.tech/stackable/nexus-garbage-collector:0.0.0-dev
37+
build-args: |
38+
REVISION=${{ github.sha }}
39+
VERSION=dev
40+
-
41+
name: Sign the published image
42+
run: cosign sign -y oci.stackable.tech/stackable/nexus-garbage-collector@${{ steps.build-and-push.outputs.digest }}

0 commit comments

Comments
 (0)