Merge pull request #707 from com-pas/task/add-bearingpoint-as-code-ow… #141
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # SPDX-FileCopyrightText: 2023 Alliander N.V. | |
| # | |
| # SPDX-License-Identifier: Apache-2.0 | |
| on: | |
| push: | |
| branches: | |
| - main | |
| permissions: | |
| contents: write | |
| id-token: write | |
| packages: write | |
| pull-requests: write | |
| name: release-please | |
| jobs: | |
| release_please: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: googleapis/release-please-action@45996ed1f6d02564a971a2fa1b5860e934307cf7 # v5.0.0 | |
| id: release | |
| with: | |
| target-branch: main | |
| token: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Checkout | |
| if: ${{ steps.release.outputs.release_created }} | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6 | |
| - name: Cache Docker Register | |
| if: ${{ steps.release.outputs.release_created }} | |
| uses: actions/cache@2c8a9bd7457de244a408f35966fab2fb45fda9c8 # v6.0.0 | |
| with: | |
| path: /tmp/.buildx-cache | |
| key: ${{ runner.os }}-buildx-${{ hashFiles('**/Dockerfile') }} | |
| - name: Set up JDK 17 | |
| if: ${{ steps.release.outputs.release_created }} | |
| uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5.4.0 | |
| with: | |
| distribution: 'zulu' | |
| java-version: '17' | |
| cache: 'maven' | |
| - name: Set up Docker Buildx | |
| if: ${{ steps.release.outputs.release_created }} | |
| id: buildx | |
| uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 | |
| - name: Login to Docker Hub | |
| if: ${{ steps.release.outputs.release_created }} | |
| uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 | |
| with: | |
| username: ${{ secrets.DOCKER_HUB_USERNAME }} | |
| password: ${{ secrets.DOCKER_HUB_TOKEN }} | |
| - name: Set Docker API version | |
| if: ${{ steps.release.outputs.release_created }} | |
| # Workaround for Docker 29.x incompatibility with Testcontainers/EmbeddedPostgres. | |
| # See: https://github.com/testcontainers/testcontainers-java/issues/11212 | |
| # This forces the Docker Java client to use API version 1.44, which is compatible with current Testcontainers/EmbeddedPostgres. | |
| run: | | |
| echo "api.version=1.44" > $HOME/.docker-java.properties | |
| - name: Install Cosign | |
| if: ${{ steps.release.outputs.release_created }} | |
| uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 | |
| - name: Create custom Maven Settings.xml | |
| if: ${{ steps.release.outputs.release_created }} | |
| uses: whelk-io/maven-settings-xml-action@9dc09b23833fa9aa7f27b63db287951856f3433d # v22 | |
| with: | |
| output_file: custom_maven_settings.xml | |
| servers: '[{ "id": "github-packages-compas", "username": "OWNER", "password": "${{ secrets.GITHUB_TOKEN }}" }]' | |
| - name: Deploy with Maven to GitHub Packages and Docker Hub | |
| if: ${{ steps.release.outputs.release_created }} | |
| run: ./mvnw -B -s custom_maven_settings.xml -Pjvm-image,release clean deploy | |
| env: | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Sign Docker image with Cosign | |
| if: ${{ steps.release.outputs.release_created }} | |
| run: | | |
| DIGEST=$(docker buildx imagetools inspect lfenergy/compas-scl-data-service:${{ steps.release.outputs.version }}-postgresql --format '{{.Manifest.Digest}}') | |
| cosign sign --yes lfenergy/compas-scl-data-service@${DIGEST} |