This repository has been archived by the owner on Jun 21, 2024. It is now read-only.

hook-worker: deny traffic to internal IPs and IPv6 (#35) #36

	name: Build hook-migrator docker image

	on:
	workflow_dispatch:
	push:
	branches:
	- "main"

	permissions:
	packages: write

	jobs:
	build:
	name: build and publish hook-migrator image
	runs-on: depot-ubuntu-22.04-4
	permissions:
	id-token: write # allow issuing OIDC tokens for this workflow run
	contents: read # allow reading the repo contents
	packages: write # allow push to ghcr.io

	steps:
	- name: Check Out Repo
	uses: actions/checkout@v3

	- name: Set up Depot CLI
	uses: depot/setup-action@v1

	- name: Login to DockerHub
	uses: docker/login-action@v2
	with:
	username: posthog
	password: ${{ secrets.DOCKERHUB_TOKEN }}

	- name: Login to ghcr.io
	uses: docker/login-action@v2
	with:
	registry: ghcr.io
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Set up QEMU
	uses: docker/setup-qemu-action@v2

	- name: Docker meta
	id: meta
	uses: docker/metadata-action@v4
	with:
	images: ghcr.io/posthog/hog-rs/hook-migrator
	tags: \|
	type=ref,event=pr
	type=ref,event=branch
	type=semver,pattern={{version}}
	type=semver,pattern={{major}}.{{minor}}
	type=sha

	- name: Set up Docker Buildx
	id: buildx
	uses: docker/setup-buildx-action@v2

	- name: Build and push migrator
	id: docker_build_hook_migrator
	uses: depot/build-push-action@v1
	with:
	context: ./
	file: ./Dockerfile.migrate
	push: true
	tags: ${{ steps.meta.outputs.tags }}
	labels: ${{ steps.meta.outputs.labels }}
	platforms: linux/arm64
	cache-from: type=gha
	cache-to: type=gha,mode=max

	- name: Hook-migrator image digest
	run: echo ${{ steps.docker_build_hook_migrator.outputs.digest }}

Provide feedback