entrypoint.sh

#!/bin/sh
set -euf

export APPNAME="$1"
export BRANCH="$GITHUB_REF"
export CODEBUILD_BUILD_ID="external-$GITHUB_RUN_ID"
export CODEBUILD_BUILD_NUMBER="external-$GITHUB_RUN_NUMBER"

# set environment variables
echo "Collecting build metadata"
aws codebuild batch-get-projects --names "$APPNAME" --query 'projects[0]' > build.json
export DOCKER_REPO=$(jq -r '.environment.environmentVariables[] | select(.name == "DOCKER_REPO") | .value' < build.json)
export PIPELINE="$(jq -r '.environment.environmentVariables[] | select(.name == "PIPELINE") | .value' < build.json)"
export DOCKERHUB_USERNAME=$(aws ssm get-parameters --names /apppack/account/dockerhub-username --query Parameters[0].Value --output text)
export DOCKERHUB_ACCESS_TOKEN=$(aws ssm get-parameters --names /apppack/account/dockerhub-access-token --with-decryption --query Parameters[0].Value --output text)
# extract build script
jq -r .source.buildspec < build.json > buildspec.yml
yj < buildspec.yml | jq -r .phases.install.commands > /tmp/script.sh
yj < buildspec.yml | jq -r .phases.pre_build.commands >> /tmp/script.sh
yj < buildspec.yml | jq -r .phases.build.commands >> /tmp/script.sh
rm build.json buildspec.yml
mkdir -p "$HOME" && git config --global --add safe.directory "$(pwd)"
# run build script
echo "::group::Running build process"
bash /tmp/script.sh
echo "::endgroup::"
echo "Fixing file permissions"
find . -user 0 -maxdepth 1 -type f -exec chown 1001 {} +
echo "docker_image=$DOCKER_REPO:$GITHUB_SHA" >> "$GITHUB_OUTPUT"