create build action

Author: karmaking

.dockerignore

@@ -0,0 +1,18 @@
+Dockerfile
+.dockerignore
+.git
+.gitignore
+.gitattributes
+README.md
+.npmrc
+.prettierrc
+.eslintrc.cjs
+.graphqlrc
+.editorconfig
+.svelte-kit
+.vscode
+.env.example
+node_modules
+build
+package
+**/.env

.github/dependabot.yml

@@ -0,0 +1,20 @@
+
+version: 2
+updates:
+
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+
+  - package-ecosystem: "npm"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    allow:
+      - dependency-type: "direct"
+    ignore:
+      - dependency-type: "indirect"
+    commit-message:
+      prefix: "chore"
+    security-updates-only: true

.github/workflows/build_container_image.yml

@@ -0,0 +1,41 @@
+name: build and publish container
+
+on:
+  push:
+    branches:
+    - main
+
+env:
+  DOCKER_HUB_ORGANIZATION: ${{ vars.DOCKER_HUB_ORGANIZATION }}
+  DOCKER_HUB_REPOSITORY: obp-portal
+
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+
+      - uses: actions/checkout@v4
+      - name: Build the Docker image with latest tag
+        run: |
+          echo "${{ secrets.DOCKER_HUB_TOKEN }}" | docker login -u "${{ secrets.DOCKER_HUB_USERNAME }}" --password-stdin docker.io
+          docker build .  --tag docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/${{ env.DOCKER_HUB_REPOSITORY }}:$GITHUB_SHA --tag docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/${{ env.DOCKER_HUB_REPOSITORY }}:main --tag docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/${{ env.DOCKER_HUB_REPOSITORY }}:latest
+          docker push docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/${{ env.DOCKER_HUB_REPOSITORY }} --all-tags
+          echo docker obp-portal with latest tag done
+
+      - uses: sigstore/cosign-installer@main
+      - name: Write signing key to disk (only needed for `cosign sign --key`)
+        run: echo "${{ secrets.COSIGN_PRIVATE_KEY }}" > cosign.key
+      - name: Sign container image with annotations from our environment
+        env:
+          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
+        run: |
+          cosign sign -y --key cosign.key \
+            -a "repo=${{ github.repository }}" \
+            -a "workflow=${{ github.workflow }}" \
+            -a "ref=${{ github.sha }}" \
+            docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/${{ env.DOCKER_HUB_REPOSITORY }}:main
+
+
+
+

Dockerfile

@@ -0,0 +1,32 @@
+FROM node:22-alpine AS builder
+WORKDIR /app
+COPY package*.json ./
+RUN npm install
+RUN npm ci
+COPY . .
+
+# Accept build arguments for environment variables
+ARG PUBLIC_OBP_BASE_URL
+ARG OBP_OAUTH_CLIENT_ID
+ARG OBP_OAUTH_CLIENT_SECRET
+ARG APP_CALLBACK_URL
+ARG ORIGIN
+
+# Set environment variables for build
+ENV PUBLIC_OBP_BASE_URL=$PUBLIC_OBP_BASE_URL
+ENV OBP_OAUTH_CLIENT_ID=$OBP_OAUTH_CLIENT_ID
+ENV OBP_OAUTH_CLIENT_SECRET=$OBP_OAUTH_CLIENT_SECRET
+ENV APP_CALLBACK_URL=$APP_CALLBACK_URL
+ENV ORIGIN=$ORIGIN
+
+RUN npm run build
+RUN npm prune --production
+
+FROM node:22-alpine
+WORKDIR /app
+COPY --from=builder /app/build build/
+COPY --from=builder /app/node_modules node_modules/
+COPY package.json .
+EXPOSE 3003
+ENV NODE_ENV=production
+CMD [ "node", "build" ]