Skip to content

[BOT] Publish v1.7.1 release #18

[BOT] Publish v1.7.1 release

[BOT] Publish v1.7.1 release #18

Workflow file for this run

name: Test and Release
on:
pull_request:
types:
- opened
- reopened
- synchronize
workflow_dispatch:
jobs:
test:
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Hub Login
uses: docker/login-action@v2
with:
username: ${{ secrets.DOCKER_USER }}
password: ${{ secrets.DOCKER_PAT }}
- name: Prepare scout binary
run: |
tar -xf dist/docker-scout_*_linux_amd64.tar.gz -C .
chmod +x docker-scout
- name: TEST docker scout version
run: ./docker-scout version
- name: TEST docker scout quickview
run: ./docker-scout quickview alpine:latest
- name: TEST docker scout cves
run: ./docker-scout cves docker/scout-demo-service:main
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Build
uses: docker/build-push-action@v5
with:
context: https://github.com/docker/scout-demo-service.git#fix-all-cves
push: false
load: true
tags: docker/scout-demo-service:fix
- name: TEST docker scout compare
run: ./docker-scout compare registry://docker/scout-demo-service:main --to local://docker/scout-demo-service:fix
release:
if: startsWith(github.head_ref, 'release/v')
permissions:
contents: write
outputs:
tag: ${{ steps.tagname.outputs.value }}
runs-on: ubuntu-latest
needs: test
steps:
- name: Checkout
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Tag name
uses: mad9000/actions-find-and-replace-string@2
id: tagname
with:
source: ${{ github.head_ref }}
find: 'release/'
replace: ''
- name: Merge and Tag
run: |
git config --unset-all http.https://github.com/.extraheader
git config --global user.email "${GITHUB_ACTOR}@users.noreply.github.com"
git config --global user.name "${GITHUB_ACTOR}"
git merge --ff-only origin/${{ github.head_ref }}
git tag ${{ steps.tagname.outputs.value }}
git push https://${GITHUB_ACTOR}:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}.git HEAD:main --tags
create_release:
needs:
- release
uses: ./.github/workflows/release.yml
permissions:
contents: write
with:
tag: ${{ needs.release.outputs.tag }}