Skip to content

chore(release): publish #27

chore(release): publish

chore(release): publish #27

Workflow file for this run

name: builder
on:
push:
paths:
- .disabled-github/images/**
jobs:
builder:
environment: operations
strategy:
matrix:
os: [ ubuntu-latest ]
runs-on: ${{ matrix.os }}
env:
GO111MODULE: "on"
GH_PAT: ${{ secrets.gh_pat }}
REGISTRY: ghcr.io
permissions:
packages: write
contents: read
attestations: write
id-token: write
steps:
- name: Checkout code
id: checkout
uses: actions/checkout@v4
with:
fetch-depth: 0
- name: Setup pnpm
id: pnpm
uses: pnpm/action-setup@v4
with:
version: 9
- name: Setup node
id: node
uses: actions/setup-node@v3
with:
node-version: 20
cache: 'pnpm'
#- run: pnpm dlx nx-cloud start-ci-run --distribute-on=".nx/workflows/distribution-config.yaml" --stop-agents-after="e2e-ci"
- name: Install node dependencies
id: dependencies
run: pnpm install --frozen-lockfile
- name: Set Shas
id: shas
uses: nrwl/nx-set-shas@v4
- name: Log in to Docker Hub
id: login-docker-hub
uses: docker/login-action@v3
with:
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}
- name: Log in to the Container registry
id: login-github
uses: docker/login-action@v3
with:
registry: ${{ env.REGISTRY }}
username: ${{ secrets.CICD_USERNAME }}
password: ${{ secrets.CICD_PASSWORD }}
- name: Extract metadata (tags, labels) for Docker
id: meta
uses: docker/metadata-action@v5
with:
images: |
${{ github.repository }}
${{ env.REGISTRY }}/${{ github.repository }}
- name: Run NX
id: nx
run: pnpm exec nx run images-github-v2alpha:container:production --base=${{ env.NX_BASE }} --head=${{ env.NX_HEAD }}
# - name: Generate artifact attestation
# uses: actions/attest-build-provenance@v1
# with:
# subject-name: ${{ env.REGISTRY }}/${{ github.repository }}
# subject-digest: ${{ steps.nx.outputs.digest }}
# push-to-registry: true