Skip to content

Commit

Permalink
Add github action for build and publish
Browse files Browse the repository at this point in the history
  • Loading branch information
manuelwedler committed Oct 24, 2024
1 parent e6889b6 commit 2bf5bed
Showing 1 changed file with 64 additions and 0 deletions.
64 changes: 64 additions & 0 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,64 @@
name: Release on Google Cloud Run

on:
push:
branches:
- main
- staging

env:
REGISTRY: ghcr.io
IMAGE_NAME: ghcr.io/verifier-alliance/parquet-export

jobs:
release:
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
id-token: write
attestations: write
steps:
- name: Checkout repository
uses: actions/checkout@v4

- name: Log in to the Container registry
uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
with:
registry: ${{ env.REGISTRY }}
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}

- name: Extract metadata (tags, labels) for Docker
id: meta
uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
with:
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

- name: Build and push Docker image
id: push
uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4
with:
context: .
push: true
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}

- name: Generate artifact attestation
uses: actions/attest-build-provenance@v1
with:
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true

- name: "auth GCP"
uses: "google-github-actions/auth@v2"
with:
workload_identity_provider: "projects/1064646032521/locations/global/workloadIdentityPools/github-actions/providers/vera-github-actions"
service_account: "vera-cloud-run-deployer@verifier-alliance.iam.gserviceaccount.com"

- id: 'deploy'
uses: 'google-github-actions/deploy-cloudrun@v2'
with:
job: 'test-parquet'
image: ${{ env.IMAGE_NAME }}

0 comments on commit 2bf5bed

Please sign in to comment.