veinmind-push.yml

name: veinmind-tools-push
on:
  workflow_call:
    secrets:
      DOCKERHUB_USERNAME:
        required: true
      DOCKERHUB_TOKEN:
        required: true

jobs:
  # push python plugins
  push-python-plugins:
    strategy:
      fail-fast: false
      matrix:
        plugin: [
          veinmind-history
        ]
        path: [ ./plugins/python/ ]
    name: ${{ matrix.plugin }}
    runs-on: ubuntu-20.04
    steps:
      - uses: actions/checkout@v3
      - uses: docker/setup-qemu-action@v2
      - uses: docker/setup-buildx-action@v2
      - uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - uses: docker/build-push-action@v3
        with:
          push: true
          platforms: |
            linux/amd64
            linux/arm64
            linux/386
          tags: |
            veinmind/${{ matrix.plugin }}:latest
            veinmind/${{ matrix.plugin }}:${{github.ref_name}}
          context: ${{ matrix.path }}/${{ matrix.plugin }}

  # push go plugins
  push-go-plugins:
    strategy:
      fail-fast: false
      matrix:
        plugin: [
          veinmind-backdoor,
          veinmind-basic,
          veinmind-escape,
          veinmind-privilege-escalation,
          veinmind-iac,
          veinmind-log4j2,
          veinmind-malicious,
          veinmind-sensitive,
          veinmind-unsafe-mount,
          veinmind-vuln,
          veinmind-weakpass,
          veinmind-webshell,
          veinmind-minio,
          veinmind-trace
        ]
        path: [ ./plugins/go/ ]
    name: ${{ matrix.plugin }}
    runs-on: ubuntu-20.04
    env:
      CI_GOOS: linux
      CI_GOARCH: amd64
    steps:
      - uses: actions/checkout@v3
      - uses: docker/setup-qemu-action@v2
      - uses: docker/setup-buildx-action@v2
      - uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - uses: docker/build-push-action@v3
        with:
          push: true
          platforms: |
            linux/amd64
            linux/arm64
          tags: |
            veinmind/${{ matrix.plugin }}:latest
            veinmind/${{ matrix.plugin }}:${{github.ref_name}}
          context: ${{ matrix.path }}/${{ matrix.plugin }}

  push-veinmind-runner:
    name: veinmind-runner
    needs: [ push-python-plugins, push-go-plugins ]
    env:
      CI_GOOS: linux
      CI_GOARCH: amd64
    runs-on: ubuntu-20.04
    steps:
      - uses: actions/checkout@v3
      - uses: docker/setup-qemu-action@v2
      - uses: docker/setup-buildx-action@v2
      - uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - uses: docker/build-push-action@v3
        with:
          push: true
          platforms: |
            linux/amd64
            linux/arm64
          tags: |
            veinmind/veinmind-runner:latest
            veinmind/veinmind-runner:${{github.ref_name}}
          context: veinmind-runner