1
- ---
2
1
name : Build/Push Image and Release Charts
3
-
4
- on :
2
+ " on " :
5
3
pull_request :
6
4
paths-ignore :
7
- - " chart/**/Chart.yaml"
8
- - " chart/**/values.yaml"
5
+ - chart/**/Chart.yaml
6
+ - chart/**/values.yaml
9
7
push :
10
8
branches :
11
9
- main
12
10
paths-ignore :
13
- - " chart/**/Chart.yaml"
14
- - " chart/**/values.yaml"
15
-
11
+ - chart/**/Chart.yaml
12
+ - chart/**/values.yaml
16
13
permissions : read-all
17
-
18
14
jobs :
19
15
setenv :
20
16
uses : ortelius/workflow-toolkit/.github/workflows/env-config-workflow.yml@c4e9eac57962580d434abd3fee4b46520596ee56
25
21
gh_sha : ${{ github.sha }}
26
22
gh_repo : ${{ github.repository }}
27
23
gh_run_number : ${{ github.run_number }}
28
-
29
24
release :
30
25
uses : ortelius/workflow-toolkit/.github/workflows/container-release-workflow.yml@c4e9eac57962580d434abd3fee4b46520596ee56
31
26
needs : setenv
@@ -38,24 +33,28 @@ jobs:
38
33
secrets :
39
34
QUAY_USERID : ${{ secrets.QUAY_USERID }}
40
35
QUAY_PASSWORD : ${{ secrets.QUAY_PASSWORD }}
41
-
36
+ permissions :
37
+ id-token : write
42
38
trivy :
43
39
permissions :
44
40
security-events : write
45
41
statuses : write
46
42
uses : ortelius/workflow-toolkit/.github/workflows/trivy-scan-workflow.yml@c4e9eac57962580d434abd3fee4b46520596ee56
47
- needs : [setenv, release]
43
+ needs :
44
+ - setenv
45
+ - release
48
46
with :
49
47
gh_repository_owner : ${{ github.repository_owner }}
50
48
gh_event_name : ${{ github.event_name }}
51
49
gh_ref : ${{ github.ref }}
52
50
image_repo_tag : ${{ needs.setenv.outputs.image_repo_tag }}
53
-
54
51
helm :
55
52
permissions :
56
53
contents : write
57
54
uses : ortelius/workflow-toolkit/.github/workflows/helm-release-workflow.yml@c4e9eac57962580d434abd3fee4b46520596ee56
58
- needs : [setenv, release]
55
+ needs :
56
+ - setenv
57
+ - release
59
58
with :
60
59
gh_repository_owner : ${{ github.repository_owner }}
61
60
gh_event_name : ${{ github.event_name }}
@@ -71,10 +70,11 @@ jobs:
71
70
GPG_PASSPHRASE : ${{ secrets.GPG_PASSPHRASE }}
72
71
GPG_KEY : ${{ secrets.GPG_KEY }}
73
72
gh_token : ${{ secrets.HELM_INDEXER_TOKEN }}
74
-
75
73
sbom :
76
74
uses : ortelius/workflow-toolkit/.github/workflows/sbom-generation-workflow.yml@c4e9eac57962580d434abd3fee4b46520596ee56
77
- needs : [setenv, release]
75
+ needs :
76
+ - setenv
77
+ - release
78
78
with :
79
79
gh_repository_owner : ${{ github.repository_owner }}
80
80
gh_event_name : ${{ github.event_name }}
0 commit comments