ci(GITHUB): poetry artifact verification workflow #34
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| --- | |
| name: cicd-tooling-github-workflow-container-gpg-multiarch | |
| on: | |
| push: | |
| paths: | |
| - ".cicd-tools/containers/gpg" | |
| - ".github/workflows/workflow-container-gpg-multiarch.yml" | |
| - ".github/workflows/job-*-container-*.yml" | |
| - "scripts/containers.sh" | |
| schedule: | |
| - cron: "0 6 * * 1" | |
| workflow_dispatch: | |
| # secrets: | |
| # SLACK_WEBHOOK: | |
| # description: "Optional, enables Slack notifications." | |
| # required: false | |
| jobs: | |
| configuration: | |
| uses: ./.github/workflows/job-00-cookiecutter-read_configuration.yml | |
| start: | |
| secrets: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| uses: ./.github/workflows/job-00-generic-notification.yml | |
| with: | |
| NOTIFICATION_EMOJI: ":vertical_traffic_light:" | |
| NOTIFICATION_MESSAGE: "Multi-arch container build has started!" | |
| WORKFLOW_NAME: "gpg-container" | |
| security: | |
| needs: | |
| - configuration | |
| secrets: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| uses: ./.github/workflows/job-10-generic-security_scan_credentials.yml | |
| with: | |
| VERBOSE_NOTIFICATIONS: ${{ fromJSON(needs.configuration.outputs.COOKIECUTTER_CONFIGURATION)._GITHUB_CI_DEFAULT_VERBOSE_NOTIFICATIONS }} | |
| WORKFLOW_NAME: "gpg-container" | |
| scan: | |
| permissions: | |
| security-events: write | |
| needs: | |
| - configuration | |
| secrets: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| strategy: | |
| fail-fast: true | |
| matrix: | |
| include: | |
| - build-platform: linux/amd64 | |
| build-tag: linux-amd64 | |
| - build-platform: linux/arm64 | |
| build-tag: linux-arm64 | |
| max-parallel: ${{ fromJSON(needs.configuration.outputs.COOKIECUTTER_CONFIGURATION)._GITHUB_CI_DEFAULT_CONCURRENCY }} | |
| uses: ./.github/workflows/job-10-container-security_scan_container.yml | |
| with: | |
| CONTEXT: .cicd-tools/containers/gpg | |
| FAIL_BUILD: true | |
| FAIL_THRESHOLD: "critical" | |
| FIXED_ONLY: true | |
| IMAGE_NAME: cicd-tools-org/cicd-tools-gpg | |
| IMAGE_TAG: ${{ matrix.build-tag }} | |
| PLATFORM: ${{ matrix.build-platform }} | |
| REQUIRES_QEMU: true | |
| VERBOSE_NOTIFICATIONS: ${{ fromJSON(needs.configuration.outputs.COOKIECUTTER_CONFIGURATION)._GITHUB_CI_DEFAULT_VERBOSE_NOTIFICATIONS }} | |
| WORKFLOW_NAME: "gpg-container" | |
| lint: | |
| needs: | |
| - configuration | |
| secrets: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| uses: ./.github/workflows/job-80-container-dockerfile_linter.yml | |
| with: | |
| DOCKERFILE: .cicd-tools/containers/gpg/Dockerfile | |
| VERBOSE_NOTIFICATIONS: ${{ fromJSON(needs.configuration.outputs.COOKIECUTTER_CONFIGURATION)._GITHUB_CI_DEFAULT_VERBOSE_NOTIFICATIONS }} | |
| WORKFLOW_NAME: "gpg-container" | |
| push: | |
| needs: | |
| - configuration | |
| - lint | |
| - scan | |
| - security | |
| - start | |
| permissions: | |
| packages: write | |
| secrets: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| strategy: | |
| fail-fast: true | |
| matrix: | |
| include: | |
| - build-platform: linux/amd64 | |
| build-tag: linux-amd64 | |
| - build-platform: linux/arm64 | |
| build-tag: linux-arm64 | |
| max-parallel: ${{ fromJSON(needs.configuration.outputs.COOKIECUTTER_CONFIGURATION)._GITHUB_CI_DEFAULT_CONCURRENCY }} | |
| uses: ./.github/workflows/job-95-container-push.yml | |
| with: | |
| CONTEXT: .cicd-tools/containers/gpg | |
| IMAGE_NAME: cicd-tools-org/cicd-tools-gpg | |
| IMAGE_TAG: ${{ matrix.build-tag }} | |
| PLATFORM: ${{ matrix.build-platform }} | |
| REQUIRES_QEMU: true | |
| VERBOSE_NOTIFICATIONS: ${{ fromJSON(needs.configuration.outputs.COOKIECUTTER_CONFIGURATION)._GITHUB_CI_DEFAULT_VERBOSE_NOTIFICATIONS }} | |
| WORKFLOW_NAME: "gpg-container" | |
| multiarch: | |
| needs: | |
| - configuration | |
| - push | |
| permissions: | |
| packages: write | |
| secrets: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| uses: ./.github/workflows/job-95-container-multiarch.yml | |
| with: | |
| IMAGE_GIT: true | |
| IMAGE_LATEST: true | |
| IMAGE_NAME: cicd-tools-org/cicd-tools-gpg | |
| MULTIARCH_TAG: "multiarch" | |
| SOURCE_TAGS: | | |
| linux-amd64 | |
| linux-arm64 | |
| VERBOSE_NOTIFICATIONS: ${{ fromJSON(needs.configuration.outputs.COOKIECUTTER_CONFIGURATION)._GITHUB_CI_DEFAULT_VERBOSE_NOTIFICATIONS }} | |
| WORKFLOW_NAME: "gpg-container" | |
| success: | |
| needs: | |
| - multiarch | |
| secrets: | |
| SLACK_WEBHOOK: ${{ secrets.SLACK_WEBHOOK }} | |
| uses: ./.github/workflows/job-00-generic-notification.yml | |
| with: | |
| NOTIFICATION_EMOJI: ":checkered_flag:" | |
| NOTIFICATION_MESSAGE: "Multi-arch container build has completed successfully!" | |
| WORKFLOW_NAME: "gpg-container" |