feat(ci): add auto sync to registry (#254)

.github/workflows/veinmind-push.yml

@@ -6,10 +6,6 @@ on:
         required: true
       DOCKERHUB_TOKEN:
         required: true
-      HARBOR_USERNAME:
-        required: true
-      HARBOR_PASSWORD:
-        required: true
 
 jobs:
   # push python plugins

.github/workflows/veinmind-sync.yml

@@ -0,0 +1,37 @@
+name: veinmind-tools-sync
+on:
+  workflow_call:
+    secrets:
+      HARBOR_USERNAME:
+        required: true
+      HARBOR_PASSWORD:
+        required: true
+jobs:
+  sync_harbor:
+    strategy:
+      fail-fast: false
+      matrix:
+        plugin: [
+          veinmind-backdoor,
+          veinmind-history,
+          veinmind-basic,
+          veinmind-escape,
+          veinmind-privilege-escalation,
+          veinmind-iac,
+          veinmind-log4j2,
+          veinmind-malicious,
+          veinmind-sensitive,
+          veinmind-unsafe-mount,
+          veinmind-vuln,
+          veinmind-weakpass,
+          veinmind-webshell,
+          veinmind-minio,
+          veinmind-runner
+        ]
+    runs-on: ubuntu-20.04
+    steps:
+      - uses: actions/checkout@v3
+      - name: skopeo-copy
+        run: |
+          skopeo sync --src docker --dest docker --dest-creds ${{ secrets.HARBOR_USERNAME }}:${{ secrets.HARBOR_PASSWORD }} veinmind/${{ matrix.plugin }}:${{github.ref_name}} registry.veinmind.tech/veinmind/
+          skopeo sync --src docker --dest docker --dest-creds ${{ secrets.HARBOR_USERNAME }}:${{ secrets.HARBOR_PASSWORD }} veinmind/${{ matrix.plugin }}:latest registry.veinmind.tech/veinmind/

.github/workflows/veinmind-tools.yml

@@ -17,5 +17,10 @@ jobs:
     secrets:
       DOCKERHUB_USERNAME: ${{ secrets.DOCKERHUB_USERNAME }}
       DOCKERHUB_TOKEN: ${{ secrets.DOCKERHUB_TOKEN }}
+  sync:
+    if: startsWith(github.ref, 'refs/tags/')
+    needs: [ push ]
+    uses: ./.github/workflows/veinmind-sync.yml
+    secrets:
       HARBOR_USERNAME: ${{ secrets.HARBOR_USERNAME }}
       HARBOR_PASSWORD: ${{ secrets.HARBOR_PASSWORD }}