build: refactor inputs #1
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: .test-bake | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| on: | |
| workflow_dispatch: | |
| push: | |
| branches: | |
| - 'main' | |
| - 'releases/v*' | |
| tags: | |
| - 'v*' | |
| pull_request: | |
| jobs: | |
| bake-aws-single: | |
| uses: ./.github/workflows/bake.yml | |
| permissions: | |
| contents: read | |
| id-token: write | |
| with: | |
| context: test | |
| target: hello | |
| output: image | |
| push: ${{ github.event_name != 'pull_request' }} | |
| cache: true | |
| cache-scope: bake-aws | |
| meta-images: | | |
| public.ecr.aws/q3b5f1u4/test-docker-action | |
| meta-tags: | | |
| type=raw,value=bake-ghbuilder-single-${{ github.run_id }} | |
| bake-sbom: true | |
| secrets: | |
| registry-auths: | | |
| - registry: public.ecr.aws | |
| username: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| password: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| bake-aws-single-verify: | |
| uses: ./.github/workflows/verify.yml | |
| if: ${{ github.event_name != 'pull_request' }} | |
| needs: | |
| - bake-aws-single | |
| with: | |
| builder-outputs: ${{ toJSON(needs.bake-aws-single.outputs) }} | |
| secrets: | |
| registry-auths: | | |
| - registry: public.ecr.aws | |
| username: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| password: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| bake-aws-single-outputs: | |
| runs-on: ubuntu-24.04 | |
| needs: | |
| - bake-aws-single | |
| steps: | |
| - | |
| name: Builder outputs | |
| uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 | |
| env: | |
| INPUT_BUILDER-OUTPUTS: ${{ toJSON(needs.bake-aws-single.outputs) }} | |
| with: | |
| script: | | |
| const builderOutputs = JSON.parse(core.getInput('builder-outputs')); | |
| core.info(JSON.stringify(builderOutputs, null, 2)); | |
| bake-aws: | |
| uses: ./.github/workflows/bake.yml | |
| permissions: | |
| contents: read | |
| id-token: write | |
| with: | |
| context: test | |
| target: hello-cross | |
| output: image | |
| push: ${{ github.event_name != 'pull_request' }} | |
| cache: true | |
| cache-scope: bake-aws | |
| meta-images: | | |
| public.ecr.aws/q3b5f1u4/test-docker-action | |
| meta-tags: | | |
| type=raw,value=bake-ghbuilder-${{ github.run_id }} | |
| bake-sbom: true | |
| secrets: | |
| registry-auths: | | |
| - registry: public.ecr.aws | |
| username: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| password: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| bake-aws-verify: | |
| uses: ./.github/workflows/verify.yml | |
| if: ${{ github.event_name != 'pull_request' }} | |
| needs: | |
| - bake-aws | |
| with: | |
| builder-outputs: ${{ toJSON(needs.bake-aws.outputs) }} | |
| secrets: | |
| registry-auths: | | |
| - registry: public.ecr.aws | |
| username: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| password: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| bake-aws-outputs: | |
| runs-on: ubuntu-24.04 | |
| needs: | |
| - bake-aws | |
| steps: | |
| - | |
| name: Builder outputs | |
| uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 | |
| env: | |
| INPUT_BUILDER-OUTPUTS: ${{ toJSON(needs.bake-aws.outputs) }} | |
| with: | |
| script: | | |
| const builderOutputs = JSON.parse(core.getInput('builder-outputs')); | |
| core.info(JSON.stringify(builderOutputs, null, 2)); | |
| bake-ghcr-and-aws: | |
| uses: ./.github/workflows/bake.yml | |
| permissions: | |
| contents: read | |
| id-token: write | |
| packages: write | |
| with: | |
| context: test | |
| target: hello-cross | |
| output: image | |
| push: ${{ github.event_name != 'pull_request' }} | |
| cache: true | |
| cache-scope: bake-aws | |
| meta-images: | | |
| ghcr.io/docker/github-builder-test | |
| public.ecr.aws/q3b5f1u4/test-docker-action | |
| meta-tags: | | |
| type=raw,value=${{ github.run_id }},prefix=bake-ghcr-and-aws- | |
| bake-sbom: true | |
| secrets: | |
| registry-auths: | | |
| - registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - registry: public.ecr.aws | |
| username: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| password: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| bake-ghcr-and-aws-verify: | |
| uses: ./.github/workflows/verify.yml | |
| if: ${{ github.event_name != 'pull_request' }} | |
| needs: | |
| - bake-ghcr-and-aws | |
| with: | |
| builder-outputs: ${{ toJSON(needs.bake-ghcr-and-aws.outputs) }} | |
| secrets: | |
| registry-auths: | | |
| - registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - registry: public.ecr.aws | |
| username: ${{ secrets.AWS_ACCESS_KEY_ID }} | |
| password: ${{ secrets.AWS_SECRET_ACCESS_KEY }} | |
| bake-ghcr-and-aws-outputs: | |
| runs-on: ubuntu-24.04 | |
| needs: | |
| - bake-ghcr-and-aws | |
| steps: | |
| - | |
| name: Builder outputs | |
| uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 | |
| env: | |
| INPUT_BUILDER-OUTPUTS: ${{ toJSON(needs.bake-ghcr-and-aws.outputs) }} | |
| with: | |
| script: | | |
| const builderOutputs = JSON.parse(core.getInput('builder-outputs')); | |
| core.info(JSON.stringify(builderOutputs, null, 2)); | |
| bake-local: | |
| uses: ./.github/workflows/bake.yml | |
| permissions: | |
| contents: read | |
| id-token: write | |
| with: | |
| context: test | |
| target: hello-cross | |
| output: local | |
| push: ${{ github.event_name != 'pull_request' }} | |
| cache: true | |
| artifact-name: bake-output | |
| bake-sbom: true | |
| bake-local-verify: | |
| uses: ./.github/workflows/verify.yml | |
| if: ${{ github.event_name != 'pull_request' }} | |
| needs: | |
| - bake-local | |
| with: | |
| builder-outputs: ${{ toJSON(needs.bake-local.outputs) }} | |
| bake-local-outputs: | |
| runs-on: ubuntu-24.04 | |
| needs: | |
| - bake-local | |
| steps: | |
| - | |
| name: Builder outputs | |
| uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 | |
| env: | |
| INPUT_BUILDER-OUTPUTS: ${{ toJSON(needs.bake-local.outputs) }} | |
| with: | |
| script: | | |
| const builderOutputs = JSON.parse(core.getInput('builder-outputs')); | |
| core.info(JSON.stringify(builderOutputs, null, 2)); | |
| bake-local-single: | |
| uses: ./.github/workflows/bake.yml | |
| permissions: | |
| contents: read | |
| id-token: write | |
| with: | |
| context: test | |
| target: hello | |
| output: local | |
| push: ${{ github.event_name != 'pull_request' }} | |
| cache: true | |
| artifact-name: bake-output-single | |
| bake-sbom: true | |
| bake-local-single-verify: | |
| uses: ./.github/workflows/verify.yml | |
| if: ${{ github.event_name != 'pull_request' }} | |
| needs: | |
| - bake-local-single | |
| with: | |
| builder-outputs: ${{ toJSON(needs.bake-local-single.outputs) }} | |
| bake-local-single-outputs: | |
| runs-on: ubuntu-24.04 | |
| needs: | |
| - bake-local-single | |
| steps: | |
| - | |
| name: Builder outputs | |
| uses: actions/github-script@ed597411d8f924073f98dfc5c65a23a2325f34cd # v8.0.0 | |
| env: | |
| INPUT_BUILDER-OUTPUTS: ${{ toJSON(needs.bake-local-single.outputs) }} | |
| with: | |
| script: | | |
| const builderOutputs = JSON.parse(core.getInput('builder-outputs')); | |
| core.info(JSON.stringify(builderOutputs, null, 2)); | |
| bake-set-runner: | |
| uses: ./.github/workflows/bake.yml | |
| permissions: | |
| contents: read | |
| id-token: write | |
| with: | |
| runner: amd64 | |
| context: test | |
| target: hello-cross | |
| output: image | |
| push: false | |
| meta-images: | | |
| public.ecr.aws/q3b5f1u4/test-docker-action | |
| meta-tags: | | |
| type=raw,value=bake-ghbuilder-${{ github.run_id }} |