Skip to content

chore(deps): update dependency open-policy-agent/conftest to v0.47.0 #57

chore(deps): update dependency open-policy-agent/conftest to v0.47.0

chore(deps): update dependency open-policy-agent/conftest to v0.47.0 #57

name: tekton-task-images-conftest-publish
on:
push:
paths:
- tekton-task-images/conftest/VERSION
- .github/workflows/tekton-task-images-conftest-publish.yaml
# Declare default permissions as read only.
permissions: read-all
jobs:
build:
env:
context: tekton-task-images/conftest
image_name: tekton-task-conftest
REGISTRY: ${{ secrets.REGISTRY_URI }}
runs-on: ubuntu-latest
permissions:
packages: write
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4
- name: Convert VERSION to version.json
run: |
version=$(sed -n '2p' ${{ env.context }}/VERSION | cut -d"=" -f2)
jq -c --null-input --arg version "v$version" '{ "version": $version }' > ${{ env.context }}/version.json
- name: Get image tags
id: image_tags
uses: redhat-cop/github-actions/get-image-version@11f2ce27643eb7c76ac3623cb99d9b08be30d762 # v4
with:
IMAGE_CONTEXT_DIR: ${{ env.context }}
- name: Build image
id: build_image
uses: redhat-actions/buildah-build@b4dc19b4ba891854660ab1f88a097d45aa158f76 # v2
with:
context: ${{ env.context }}
dockerfiles: |
./${{ env.context }}/Dockerfile
image: ${{ env.image_name }}
tags: "${{ steps.image_tags.outputs.IMAGE_TAGS }}"
- name: Push to ghcr.io
uses: redhat-actions/push-to-registry@9986a6552bc4571882a4a67e016b17361412b4df # v2
with:
image: ${{ steps.build_image.outputs.image }}
registry: ghcr.io/${{ github.repository }}
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
tags: ${{ steps.build_image.outputs.tags }}
- name: Push to Quay
if: ${{ env.REGISTRY }} != ""
id: push_to_quay
uses: redhat-actions/push-to-registry@9986a6552bc4571882a4a67e016b17361412b4df # v2
with:
image: ${{ steps.build_image.outputs.image }}
registry: ${{ secrets.REGISTRY_URI }}/${{ secrets.REGISTRY_REPOSITORY }}
username: ${{ secrets.REGISTRY_USERNAME }}
password: ${{ secrets.REGISTRY_PASSWORD }}
tags: ${{ steps.build_image.outputs.tags }}