ci(renovate): Automerge minor updates if all tests pass #1344
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build Dockerfile if changed and run smoke tests | |
| on: | |
| pull_request: | |
| permissions: | |
| contents: read | |
| env: | |
| IMAGE_TAG: pr-test | |
| jobs: | |
| build: | |
| permissions: | |
| # for MaxymVlasov/dive-action to write comments to PRs | |
| pull-requests: write | |
| strategy: | |
| matrix: | |
| arch: | |
| - amd64 | |
| - arm64 | |
| include: | |
| - os-name: Ubuntu x64 | |
| os: ubuntu-latest | |
| arch: amd64 | |
| - os-name: Ubuntu ARM | |
| os: ubuntu-24.04-arm | |
| arch: arm64 | |
| name: ${{ matrix.os-name }} | |
| runs-on: ${{ matrix.os }} | |
| steps: | |
| - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 | |
| with: | |
| fetch-depth: 0 | |
| - name: Get changed Docker related files | |
| id: changed-files-specific | |
| uses: tj-actions/changed-files@dcc7a0cba800f454d79fff4b993e8c3555bcc0a8 # v45.0.7 | |
| with: | |
| files: | | |
| Dockerfile | |
| .dockerignore | |
| tools/entrypoint.sh | |
| .github/workflows/build-image-test.yaml | |
| tools/*.sh | |
| - name: Set IMAGE environment variable | |
| if: steps.changed-files-specific.outputs.any_changed == 'true' | |
| # Lowercase the org/repo name to allow for workflow to run in forks, | |
| # which owners have uppercase letters in username | |
| run: >- | |
| echo "IMAGE=ghcr.io/${GITHUB_REPOSITORY@L}:${{ env.IMAGE_TAG }}" | |
| >> $GITHUB_ENV | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca # v3.9.0 | |
| if: steps.changed-files-specific.outputs.any_changed == 'true' | |
| - name: Build if Dockerfile changed | |
| if: steps.changed-files-specific.outputs.any_changed == 'true' | |
| uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6.13.0 | |
| with: | |
| context: . | |
| build-args: | | |
| INSTALL_ALL=true | |
| push: false | |
| load: true | |
| tags: ${{ env.IMAGE }} | |
| # Fix multi-platform: https://github.com/docker/buildx/issues/1533 | |
| provenance: false | |
| secrets: | | |
| "github_token=${{ secrets.GITHUB_TOKEN }}" | |
| - name: Setup Container Structure Tests | |
| if: steps.changed-files-specific.outputs.any_changed == 'true' | |
| env: | |
| # yamllint disable-line rule:line-length | |
| # renovate: datasource=github-releases depName=container-structure-test lookupName=GoogleContainerTools/container-structure-test | |
| CST_VERSION: 1.19.3 | |
| CST_REPO: github.com/GoogleContainerTools/container-structure-test | |
| run: >- | |
| curl -L "https://${{ env.CST_REPO }}/releases/download/v${{ | |
| env.CST_VERSION }}/container-structure-test-linux-${{ matrix.arch }}" | |
| > container-structure-test | |
| && chmod +x container-structure-test | |
| && mkdir -p $HOME/bin/ | |
| && mv container-structure-test $HOME/bin/ | |
| && echo $HOME/bin/ >> $GITHUB_PATH | |
| - name: Run structure tests | |
| if: steps.changed-files-specific.outputs.any_changed == 'true' | |
| run: >- | |
| container-structure-test test | |
| --config ${{ github.workspace | |
| }}/.github/.container-structure-test-config.yaml | |
| --image ${{ env.IMAGE }} | |
| - name: Dive - check image for waste files | |
| if: steps.changed-files-specific.outputs.any_changed == 'true' | |
| uses: MaxymVlasov/dive-action@94506fd846be3ec26406118c3878ccd2ad2b0150 # v1.3.0 | |
| with: | |
| image: ${{ env.IMAGE }} | |
| config-file: ${{ github.workspace }}/.github/.dive-ci.yaml | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| # Can't build both platforms and use --load at the same time | |
| # https://github.com/docker/buildx/issues/59#issuecomment-1433097926 | |
| - name: Build Multi-arch docker-image | |
| if: >- | |
| steps.changed-files-specific.outputs.any_changed == 'true' | |
| && matrix.os == 'ubuntu-latest' | |
| uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6.13.0 | |
| with: | |
| context: . | |
| build-args: | | |
| INSTALL_ALL=true | |
| platforms: linux/amd64,linux/arm64 | |
| push: false | |
| tags: ${{ env.IMAGE }} | |
| # Fix multi-platform: https://github.com/docker/buildx/issues/1533 | |
| provenance: false | |
| secrets: | | |
| "github_token=${{ secrets.GITHUB_TOKEN }}" |