Labday Github Action / Github Packages #22
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This work add a new pipeline into GitHub for building and publishing the output assets into Github Packages without resorting to our nexus repositories. This is a required for moving away from not only nexus but from Jenkins too.
See Github Packages
The required Github token for publishing the packages is passed by the Github Action to the runner as documented in this Github Document, it is not stored anywhere.
The proposed change in the development flow is, instead of connecting to the VPN for pulling the assets from the nexus repository, all the GitHub actions will pull them from GitHub. The security, who can read / publish packages depends on the writing/reading permissions to the repository allowing more granularity than the nexus repo (all people with access to the VPN).
The is an small change to be introduced on the local setup. People will need to define an environment variable (GITHUB_TOKEN) with a Github Personal Token instead. This approach is fully compatible with using the GH cli.
This will not be required until we deprecate the Jenkins builds.
After merging this PR:
Note, none of this work will affect builds on Jenkins, it is a non-disruptive work because of the approach I'm following.
This double build pipeline will allow me to cut PRs on dependent projects without breaking the pipelines.
Note: Slack notifications will be pulled from GitHub following the approach described on Slack
Work on this PR includes: