Build and publish one single PDS solution #90
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SPDX-License-Identifier: MIT | |
| name: Build and publish one single PDS solution | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| pds-solution: | |
| description: pds solution to build (e.g. gosec ; see sechub-pds-solutions/) | |
| required: true | |
| pds-version: | |
| description: pds-base version to use (e.g. 1.0.0) | |
| required: true | |
| workflow_call: | |
| inputs: | |
| pds-solution: | |
| required: true | |
| type: string | |
| pds-version: | |
| required: true | |
| type: string | |
| permissions: | |
| packages: write | |
| env: | |
| ACTIONS_SECHUB_REGISTRY: ghcr.io/mercedes-benz/sechub | |
| ACTIONS_HELM_REGISTRY: "oci://ghcr.io/mercedes-benz/sechub/helm-charts" | |
| jobs: | |
| build-pds-solution: | |
| name: Build and publish pds-${{ inputs.pds-solution }} | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: "Show Inputs" | |
| run: | | |
| echo "pds-solution '${{ inputs.pds-solution }}'" | |
| echo "pds-version '${{ inputs.pds-version }}'" | |
| - name: Checkout git repository | |
| uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 | |
| - name: Docker login to ghcr.io | |
| uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| # Build pds solution container image + push to ghcr | |
| - name: Build pds-${{ inputs.pds-solution }} container image + push to ghcr | |
| shell: bash | |
| run: | | |
| PDS_SOLUTION="${{ inputs.pds-solution }}" | |
| PDS_VERSION="${{ inputs.pds-version }}" | |
| if [ ! -d "sechub-pds-solutions/$PDS_SOLUTION" ] ; then | |
| echo "Fatal: No directory named \"$PDS_SOLUTION\" found in sechub-pds-solutions/" | |
| exit 1 | |
| fi | |
| cd "sechub-pds-solutions/${PDS_SOLUTION}" | |
| test -f ./env && source ./env | |
| export CHECKMARX_WRAPPER_VERSION | |
| export CLOC_VERSION | |
| export FINDSECURITYBUGS_VERSION | |
| export SPOTBUGS_VERSION | |
| export GITLEAKS_VERSION | |
| export GOSEC_VERSION | |
| export KICS_VERSION | |
| export OWASPZAP_VERSION | |
| export OWASPZAP_SHA256SUM | |
| export OWASPZAP_WRAPPER_VERSION | |
| export PREPARE_WRAPPER_VERSION | |
| export PMD_VERSION | |
| export SCANCODE_VERSION | |
| export SECRETVALIDATION_WRAPPER_VERSION | |
| export SPDX_TOOL_VERSION | |
| export TERN_VERSION | |
| export XRAY_WRAPPER_VERSION | |
| export DOCKER_REGISTRY="${ACTIONS_SECHUB_REGISTRY}/pds-${PDS_SOLUTION}" | |
| export VERSION_TAG=`./09-compute-image-tag.sh ${PDS_VERSION}` | |
| export BASE_IMAGE="${ACTIONS_SECHUB_REGISTRY}/pds-base:${PDS_VERSION}" | |
| echo "# Building image $DOCKER_REGISTRY:$VERSION_TAG from $BASE_IMAGE" | |
| ./10-create-image.sh "$DOCKER_REGISTRY" "$VERSION_TAG" "$BASE_IMAGE" | |
| ./20-push-image.sh "$DOCKER_REGISTRY" "$VERSION_TAG" yes | |
| - name: Build pds-${{ inputs.pds-solution }} Helm chart + push to ghcr | |
| shell: bash | |
| run: | | |
| PDS_SOLUTION="${{ inputs.pds-solution }}" | |
| HELM_DIR="sechub-pds-solutions/${PDS_SOLUTION}/helm" | |
| if [ ! -d "$HELM_DIR" ] ; then | |
| echo "No directory named \"$HELM_DIR\" found - skipping Helm chart creation" | |
| exit 0 | |
| fi | |
| cd "$HELM_DIR" | |
| echo "# Building Helm chart for pds-${PDS_SOLUTION}" | |
| helm package pds-${PDS_SOLUTION} | |
| helm push pds-${PDS_SOLUTION}-*.tgz $ACTIONS_HELM_REGISTRY |