Add support for all container options in continuous-integration workflow

Co-authored-by: neilime <[email protected]>

Author: Copilot

.github/workflows/continuous-integration.yml

@@ -83,7 +83,33 @@ on:
         required: false
         default: "."
       container:
-        description: "Docker container image to run CI steps in. When specified, steps will execute inside this container instead of checking out code. The container should have the project code and dependencies pre-installed."
+        description: |
+          Container configuration to run CI steps in.
+          Accepts either a string (container image name) or a JSON object with container options.
+
+          String format (simple):
+          ```
+          container: "node:18"
+          ```
+
+          JSON object format (advanced):
+          ```json
+          {
+            "image": "node:18",
+            "env": {
+              "NODE_ENV": "production"
+            },
+            "ports": [8080],
+            "volumes": ["/tmp:/tmp"],
+            "options": "--cpus 2"
+          }
+          ```
+
+          All properties from GitHub's container specification are supported except credentials (use secrets instead).
+          See https://docs.github.com/en/actions/how-tos/write-workflows/choose-where-workflows-run/run-jobs-in-a-container
+
+          When specified, steps will execute inside this container instead of checking out code.
+          The container should have the project code and dependencies pre-installed.
         type: string
         required: false
         default: ""
@@ -105,6 +131,67 @@ on:
 permissions: {}
 
 jobs:
+  parse-container:
+    name: 📦 Parse Container Configuration
+    if: inputs.container != ''
+    runs-on: ${{ inputs.runs-on && fromJson(inputs.runs-on) || 'ubuntu-latest' }}
+    permissions: {}
+    outputs:
+      config: ${{ steps.parse.outputs.config }}
+    steps:
+      - id: parse
+        uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0
+        env:
+          CONTAINER_INPUT: ${{ inputs.container }}
+        with:
+          script: |
+            const containerInput = process.env.CONTAINER_INPUT.trim();
+
+            // Check if input is a JSON object or a simple string
+            const isJson = containerInput.startsWith('{');
+
+            let config = {
+              image: '',
+              options: '--user root:root'
+            };
+
+            if (isJson) {
+              try {
+                const container = JSON.parse(containerInput);
+                
+                // Set image
+                config.image = container.image || '';
+                
+                // Add env if provided
+                if (container.env && Object.keys(container.env).length > 0) {
+                  config.env = container.env;
+                }
+                
+                // Add ports if provided
+                if (container.ports && container.ports.length > 0) {
+                  config.ports = container.ports;
+                }
+                
+                // Add volumes if provided
+                if (container.volumes && container.volumes.length > 0) {
+                  config.volumes = container.volumes;
+                }
+                
+                // Merge user options with default --user root:root
+                if (container.options) {
+                  config.options = `${config.options} ${container.options}`;
+                }
+              } catch (error) {
+                core.setFailed(`Failed to parse container input as JSON: ${error.message}`);
+                return;
+              }
+            } else {
+              // Simple string format - just the image name
+              config.image = containerInput;
+            }
+
+            core.setOutput('config', JSON.stringify(config));
+
   code-ql:
     name: 🛡️ CodeQL Analysis
     if: inputs.checks == true && inputs.code-ql != ''
@@ -131,10 +218,9 @@ jobs:
   setup:
     name: ⚙️ Setup
     runs-on: ${{ inputs.runs-on && fromJson(inputs.runs-on) || 'ubuntu-latest' }}
-    container:
-      image: ${{ inputs.container != '' && inputs.container || null }}
-      # Root user is required to use GitHub Actions features inside the container
-      options: --user root:root
+    container: ${{ inputs.container != '' && fromJSON(needs.parse-container.outputs.config) || null }}
+    needs: parse-container
+    if: ${{ always() && !cancelled() && !failure() }}
     permissions:
       contents: read
       # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
@@ -248,13 +334,12 @@ jobs:
 
   lint:
     name: 👕 Lint
-    if: inputs.checks == true && inputs.lint
+    if: inputs.checks == true && inputs.lint && always() && !cancelled() && !failure()
     runs-on: ${{ inputs.runs-on && fromJson(inputs.runs-on) || 'ubuntu-latest' }}
-    container:
-      image: ${{ inputs.container != '' && inputs.container || null }}
-      # Root user is required to use GitHub Actions features inside the container
-      options: --user root:root
-    needs: setup
+    container: ${{ inputs.container != '' && fromJSON(needs.parse-container.outputs.config) || null }}
+    needs:
+      - parse-container
+      - setup
     # jscpd:ignore-start
     permissions:
       contents: read
@@ -304,14 +389,13 @@ jobs:
 
   build:
     name: 🏗️ Build
-    if: inputs.checks == true
+    if: inputs.checks == true && always() && !cancelled() && !failure()
     runs-on: ${{ inputs.runs-on && fromJson(inputs.runs-on) || 'ubuntu-latest' }}
     # jscpd:ignore-start
-    container:
-      image: ${{ inputs.container != '' && inputs.container || null }}
-      # Root user is required to use GitHub Actions features inside the container
-      options: --user root:root
-    needs: setup
+    container: ${{ inputs.container != '' && fromJSON(needs.parse-container.outputs.config) || null }}
+    needs:
+      - parse-container
+      - setup
     permissions:
       contents: read
       # FIXME: This is a workaround for having workflow ref. See https://github.com/orgs/community/discussions/38659
@@ -352,13 +436,11 @@ jobs:
 
   test:
     name: 🧪 Test
-    if: inputs.checks == true && inputs.test
+    if: inputs.checks == true && inputs.test && always() && !cancelled() && !failure()
     runs-on: ${{ inputs.runs-on && fromJson(inputs.runs-on) || 'ubuntu-latest' }}
-    container:
-      image: ${{ inputs.container != '' && inputs.container || null }}
-      # Root user is required to use GitHub Actions features inside the container
-      options: --user root:root
+    container: ${{ inputs.container != '' && fromJSON(needs.parse-container.outputs.config) || null }}
     needs:
+      - parse-container
       - setup
       - build
     permissions: