Bump google-github-actions/run-gemini-cli from 0.1.19 to 0.1.21 #725
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build Main | |
| on: | |
| push: | |
| branches: [ main, ghactions ] | |
| env: | |
| IMAGE_NAME: preflight | |
| jobs: | |
| build-main: | |
| # TODO: Set explicit permissions for this job. | |
| # zizmor: ignore[excessive-permissions] | |
| name: Build and push main snapshot images | |
| strategy: | |
| matrix: | |
| architecture: [amd64,ppc64le,arm64,s390x] | |
| platform: [linux] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| # Get tags and all history in order to find latest tag in later step | |
| fetch-depth: 0 | |
| fetch-tags: true | |
| - name: Set release tag and short SHA | |
| run: | | |
| echo "RELEASE_TAG=$(git describe --abbrev=0 --tags)" >> "${GITHUB_ENV}" | |
| echo "SHA_SHORT=$(git rev-parse --short HEAD)" >> "${GITHUB_ENV}" | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0 | |
| - name: Build Image | |
| id: build-image | |
| uses: redhat-actions/buildah-build@7a95fa7ee0f02d552a32753e7414641a04307056 # v2.13 | |
| with: | |
| image: ${{ secrets.IMAGE_REGISTRY }}/${{ env.IMAGE_NAME }} | |
| tags: ${{ env.SHA_SHORT }}-${{ matrix.platform }}-${{ matrix.architecture }} | |
| archs: ${{ matrix.architecture }} | |
| build-args: | | |
| quay_expiration=1w | |
| release_tag=${{ env.RELEASE_TAG }}+${{ github.sha }} | |
| ARCH=${{ matrix.architecture }} | |
| dockerfiles: | | |
| ./Dockerfile | |
| - name: Run and Validate Image | |
| run: | | |
| if ! podman run --rm "${IMAGE_WITH_TAG}" version; then | |
| echo "Image validation failed. The 'podman run' command returned a non-zero exit code." | |
| exit 1 | |
| fi | |
| env: | |
| IMAGE_WITH_TAG: ${{ steps.build-image.outputs.image-with-tag }} | |
| - name: Push Image | |
| id: push-image | |
| uses: redhat-actions/push-to-registry@5ed88d269cf581ea9ef6dd6806d01562096bee9c # v2.8 | |
| with: | |
| image: ${{ env.IMAGE_NAME }} | |
| tags: ${{ env.SHA_SHORT }}-${{ matrix.platform }}-${{ matrix.architecture }} | |
| registry: ${{ secrets.IMAGE_REGISTRY }} | |
| username: ${{ secrets.REGISTRY_USER }} | |
| password: ${{ secrets.REGISTRY_PASSWORD }} | |
| - name: Print image url | |
| run: echo "Image pushed to ${REGISTRY_PATHS}" | |
| env: | |
| REGISTRY_PATHS: ${{ steps.push-image.outputs.registry-paths }} | |
| outputs: | |
| imageName: ${{ env.IMAGE_NAME }} | |
| imageVersion: ${{ env.SHA_SHORT }} | |
| build-coverage: | |
| # TODO: Set explicit permissions for this job. | |
| # zizmor: ignore[excessive-permissions] | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| persist-credentials: false | |
| - name: Install system deps | |
| run: 'sudo apt update && sudo apt install -y libgpgme-dev libbtrfs-dev libdevmapper-dev' | |
| - name: Set up Go | |
| uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0 | |
| with: | |
| go-version-file: go.mod | |
| - name: Tidy | |
| run: make tidy | |
| - name: Vet | |
| run: make vet | |
| - name: Format | |
| run: make fmt | |
| - name: Test | |
| run: make cover | |
| - name: Coveralls | |
| uses: coverallsapp/github-action@5cbfd81b66ca5d10c19b062c04de0199c215fb6e # v2.3.7 | |
| with: | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| file: coverage.out | |
| fail-on-error: 'false' | |
| build-multiarch: | |
| # TODO: Set explicit permissions for this job. | |
| # zizmor: ignore[excessive-permissions] | |
| needs: build-main | |
| uses: ./.github/workflows/build-multiarch.yml | |
| with: | |
| name: ${{ needs.build-main.outputs.imageName }} | |
| tag: ${{ needs.build-main.outputs.imageVersion }} | |
| sign: false # do not sign images built on main | |
| secrets: | |
| registry: ${{ secrets.IMAGE_REGISTRY }} | |
| user: ${{ secrets.REGISTRY_USER }} | |
| password: ${{ secrets.REGISTRY_PASSWORD }} |