Skip to content

Build latest from main and AutoDeploy to Testing #87

Build latest from main and AutoDeploy to Testing

Build latest from main and AutoDeploy to Testing #87

Workflow file for this run

name: Build latest from main and AutoDeploy to Testing
on:
workflow_run:
workflows: [ 'Run Tests' ]
branches: [ 'main' ]
types: [ completed ]
jobs:
build-unstable:
name: Build unstable ${{ github.sha }}
uses: mlibrary/platform-engineering-workflows/.github/workflows/build-unstable.yml@v1
with:
image_name: ${{ vars.IMAGE_NAME }}
tag: ${{ github.sha }}
dockerfile: Dockerfile
secrets: inherit
#scan-image:
#needs: build-unstable
#runs-on: ubuntu-latest
#steps:
#- name: Run Trivy vulnerability scanner
#uses: aquasecurity/trivy-action@master
#with:
#image-ref: ${{ needs.build-unstable.outputs.image }}
#format: 'table'
#exit-code: '1'
#ignore-unfixed: true
#vuln-type: 'os,library'
#severity: 'CRITICAL,HIGH'
#skip-files: '/gems/ruby/3.2.0/gems/openid_connect-2.2.0/spec/mock_response/public_keys/private_key.pem'
deploy-testing:
needs: build-unstable
name: Deploy to testing
uses: mlibrary/platform-engineering-workflows/.github/workflows/deploy.yml@v1
with:
image: ${{ needs.build-unstable.outputs.image }}
file: environments/get-this/testing/web-image.txt
CONFIG_REPO_RW_APP_ID: ${{ vars.CONFIG_REPO_RW_APP_ID }}
CONFIG_REPO_RW_INSTALL_ID: ${{ vars.CONFIG_REPO_RW_INSTALL_ID }}
CONFIG_REPO_FULL_NAME: ${{ vars.CONFIG_REPO_FULL_NAME }}
secrets: inherit