CI pipelines for various tools

stackabletech · Oct 8, 2024 · f436692 · f436692
1 parent 3640cb9
commit f436692
Show file tree

Hide file tree

Showing 3 changed files with 126 additions and 0 deletions.
diff --git a/.github/workflows/build_harbor_garbage collector.yml b/.github/workflows/build_harbor_garbage collector.yml
@@ -0,0 +1,42 @@
+name: Build Harbor garbage collector docker image
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  id-token: write
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      -
+        name: Login to Stackable Harbor
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
+        with:
+          registry: oci.stackable.tech
+          username: robot$stackable+github-action-build
+          password: ${{ secrets.HARBOR_ROBOT_STACKABLE_GITHUB_ACTION_BUILD_SECRET }}
+      -
+        name: Set up Cosign
+        uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # tag=v3.3.0
+      -
+        name: Build and push
+        id: build-and-push
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
+        with:
+          context: .
+          file: ./tools/harbor-garbage-collector/Dockerfile
+          push: true
+          tags: oci.stackable.tech/stackable/harbor-garbage-collector:0.0.0-dev
+          build-args: |
+            REVISION=${{ github.sha }}
+            VERSION=dev
+      -
+        name: Sign the published image
+        run: cosign sign -y oci.stackable.tech/stackable/harbor-garbage-collector@${{ steps.build-and-push.outputs.digest }}
diff --git a/.github/workflows/build_harbor_sbom_browser.yml b/.github/workflows/build_harbor_sbom_browser.yml
@@ -0,0 +1,42 @@
+name: Build SBOM browser docker image
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  id-token: write
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      -
+        name: Login to Stackable Harbor
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
+        with:
+          registry: oci.stackable.tech
+          username: robot$stackable+github-action-build
+          password: ${{ secrets.HARBOR_ROBOT_STACKABLE_GITHUB_ACTION_BUILD_SECRET }}
+      -
+        name: Set up Cosign
+        uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # tag=v3.3.0
+      -
+        name: Build and push
+        id: build-and-push
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
+        with:
+          context: .
+          file: ./tools/harbor-sbom-browser/Dockerfile
+          push: true
+          tags: oci.stackable.tech/stackable/harbor-sbom-browser:0.0.0-dev
+          build-args: |
+            REVISION=${{ github.sha }}
+            VERSION=dev
+      -
+        name: Sign the published image
+        run: cosign sign -y oci.stackable.tech/stackable/harbor-sbom-browser@${{ steps.build-and-push.outputs.digest }}
diff --git a/.github/workflows/build_nexus_garbage collector.yml b/.github/workflows/build_nexus_garbage collector.yml
@@ -0,0 +1,42 @@
+name: Build Nexus garbage collector docker image
+
+on:
+  push:
+    branches:
+      - main
+
+permissions:
+  id-token: write
+
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    steps:
+      -
+        name: Checkout
+        uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
+      -
+        name: Login to Stackable Harbor
+        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446 # v3.2.0
+        with:
+          registry: oci.stackable.tech
+          username: robot$stackable+github-action-build
+          password: ${{ secrets.HARBOR_ROBOT_STACKABLE_GITHUB_ACTION_BUILD_SECRET }}
+      -
+        name: Set up Cosign
+        uses: sigstore/cosign-installer@9614fae9e5c5eddabb09f90a270fcb487c9f7149 # tag=v3.3.0
+      -
+        name: Build and push
+        id: build-and-push
+        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25 # v5.4.0
+        with:
+          context: .
+          file: ./tools/nexus-garbage-collector/Dockerfile
+          push: true
+          tags: oci.stackable.tech/stackable/nexus-garbage-collector:0.0.0-dev
+          build-args: |
+            REVISION=${{ github.sha }}
+            VERSION=dev
+      -
+        name: Sign the published image
+        run: cosign sign -y oci.stackable.tech/stackable/nexus-garbage-collector@${{ steps.build-and-push.outputs.digest }}