test

Signed-off-by: Sertac Ozercan <sozercan@gmail.com>
sozercan · Nov 14, 2024 · 1ca884b · 1ca884b
1 parent 68fb611
commit 1ca884b
Showing 1 changed file with 39 additions and 48 deletions.
diff --git a/.github/workflows/pre-release.yaml b/.github/workflows/pre-release.yaml
@@ -1,24 +1,25 @@
 name: pre-release
 on:
-  push:
+  pull_request:
     branches:
       - master
 
-permissions:
-  contents: read
-  packages: write
+permissions: read-all
 
 env:
-  IMAGE_REPO: openpolicyagent/gatekeeper
-  CRD_IMAGE_REPO: openpolicyagent/gatekeeper-crds
-  GATOR_IMAGE_REPO: openpolicyagent/gator
+  IMAGE_REPO: sozercan/gatekeeper
+  CRD_IMAGE_REPO: sozercan/gatekeeper-crds
+  GATOR_IMAGE_REPO: sozercan/gator
 
 jobs:
   pre-release:
     name: "Pre Release"
     runs-on: "ubuntu-22.04"
-    if: github.ref == 'refs/heads/master' && github.event_name == 'push' && github.repository == 'open-policy-agent/gatekeeper'
+    # if: github.ref == 'refs/heads/master' && github.event_name == 'push' && github.repository == 'open-policy-agent/gatekeeper'
     timeout-minutes: 30
+    permissions:
+      contents: read
+      packages: write
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@91182cccc01eb5e619899d80e4e971d6181294a7 # v2.10.1
@@ -37,46 +38,36 @@ jobs:
 
       - name: Publish development
         run: |
-          make docker-login
+          make PUSH_TO_GHCR=true docker-buildx-dev \
+            DEV_TAG=${GITHUB_SHA::7} \
+            PLATFORM="linux/amd64,linux/arm64,linux/arm/v7" \
+            OUTPUT_TYPE=type=registry \
+            GENERATE_ATTESTATIONS=true
 
-          tokenUri="https://auth.docker.io/token?service=registry.docker.io&scope=repository:${{ env.IMAGE_REPO }}:pull&scope=repository:${{ env.CRD_IMAGE_REPO }}:pull&scope=repository:${{ env.GATOR_IMAGE_REPO }}:pull"
-          bearerToken="$(curl --silent --get $tokenUri | jq --raw-output '.token')"
-          listUri="https://registry-1.docker.io/v2/${{ env.IMAGE_REPO }}/tags/list"
-          authz="Authorization: Bearer $bearerToken"
-          version_list="$(curl --silent --get -H "Accept: application/json" -H "$authz" $listUri | jq --raw-output '.')"
-          exists=$(echo $version_list | jq --arg t ${GITHUB_SHA::7} '.tags | index($t)')
-          if [[ $exists == null ]]
-          then
-            make PUSH_TO_GHCR=true docker-buildx-dev \
-              DEV_TAG=${GITHUB_SHA::7} \
-              PLATFORM="linux/amd64,linux/arm64,linux/arm/v7" \
-              OUTPUT_TYPE=type=registry \
-              GENERATE_ATTESTATIONS=true
-          fi
 
-          listUri="https://registry-1.docker.io/v2/${{ env.CRD_IMAGE_REPO }}/tags/list"
-          version_list="$(curl --silent --get -H "Accept: application/json" -H "$authz" $listUri | jq --raw-output '.')"
-          exists=$(echo $version_list | jq --arg t ${GITHUB_SHA::7} '.tags | index($t)')
-          if [[ $exists == null ]]
-          then
-            make PUSH_TO_GHCR=true docker-buildx-crds-dev \
-              DEV_TAG=${GITHUB_SHA::7} \
-              PLATFORM="linux/amd64,linux/arm64" \
-              OUTPUT_TYPE=type=registry \
-              GENERATE_ATTESTATIONS=true
-          fi
+        #   listUri="https://registry-1.docker.io/v2/${{ env.CRD_IMAGE_REPO }}/tags/list"
+        #   version_list="$(curl --silent --get -H "Accept: application/json" -H "$authz" $listUri | jq --raw-output '.')"
+        #   exists=$(echo $version_list | jq --arg t ${GITHUB_SHA::7} '.tags | index($t)')
+        #   if [[ $exists == null ]]
+        #   then
+        #     make PUSH_TO_GHCR=true docker-buildx-crds-dev \
+        #       DEV_TAG=${GITHUB_SHA::7} \
+        #       PLATFORM="linux/amd64,linux/arm64" \
+        #       OUTPUT_TYPE=type=registry \
+        #       GENERATE_ATTESTATIONS=true
+        #   fi
 
-          listUri="https://registry-1.docker.io/v2/${{ env.GATOR_IMAGE_REPO }}/tags/list"
-          version_list="$(curl --silent --get -H "Accept: application/json" -H "$authz" $listUri | jq --raw-output '.')"
-          exists=$(echo $version_list | jq --arg t ${GITHUB_SHA::7} '.tags | index($t)')
-          if [[ $exists == null ]]
-          then
-            make PUSH_TO_GHCR=true docker-buildx-gator-dev \
-              DEV_TAG=${GITHUB_SHA::7} \
-              PLATFORM="linux/amd64,linux/arm64,linux/arm/v7" \
-              OUTPUT_TYPE=type=registry \
-              GENERATE_ATTESTATIONS=true
-          fi
-        env:
-          DOCKER_USER: ${{ secrets.DOCKER_USER }}
-          DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
+        #   listUri="https://registry-1.docker.io/v2/${{ env.GATOR_IMAGE_REPO }}/tags/list"
+        #   version_list="$(curl --silent --get -H "Accept: application/json" -H "$authz" $listUri | jq --raw-output '.')"
+        #   exists=$(echo $version_list | jq --arg t ${GITHUB_SHA::7} '.tags | index($t)')
+        #   if [[ $exists == null ]]
+        #   then
+        #     make PUSH_TO_GHCR=true docker-buildx-gator-dev \
+        #       DEV_TAG=${GITHUB_SHA::7} \
+        #       PLATFORM="linux/amd64,linux/arm64,linux/arm/v7" \
+        #       OUTPUT_TYPE=type=registry \
+        #       GENERATE_ATTESTATIONS=true
+        #   fi
+        # env:
+        #   DOCKER_USER: ${{ secrets.DOCKER_USER }}
+        #   DOCKER_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}