Populate CODEOWENRS, baseline package.json and baseline cortex.yaml #60
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build | |
| on: [push, pull_request] | |
| jobs: | |
| test: | |
| runs-on: ${{ matrix.os }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| node-version: [12.x] | |
| os: [ubuntu-latest] | |
| steps: | |
| - id: setup-node | |
| name: Setup Node | |
| uses: actions/setup-node@v1 | |
| with: | |
| node-version: ${{ matrix.node-version }} | |
| - name: Check out code repository source code | |
| uses: actions/checkout@v2 | |
| - name: Install dependencies | |
| run: yarn | |
| - name: Run tests | |
| run: yarn test | |
| - name: Verify NPM module builds | |
| run: yarn build | |
| - name: Verify that Docker image builds | |
| run: docker build . | |
| npm: | |
| if: github.ref == 'refs/heads/main' | |
| runs-on: ubuntu-latest | |
| needs: test | |
| outputs: | |
| didpublishnpm: ${{ steps.build-and-publish.outputs.didpublishnpm }} | |
| strategy: | |
| fail-fast: false | |
| matrix: | |
| node: [12] | |
| steps: | |
| - name: Initialize Output | |
| run: echo "::set-output name=didpublishnpm::false" | |
| - name: Check out repo | |
| uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 2 | |
| - name: Check if publish needed | |
| run: | | |
| name="$(jq -r .name package.json)" | |
| npmver="$(npm show $name version || echo v0.0.0)" | |
| pkgver="$(jq -r .version package.json)" | |
| if [ "$npmver" = "$pkgver" ] | |
| then | |
| echo "Package version ($pkgver) is the same as last published NPM version ($npmver), skipping publish." | |
| else | |
| echo "Package version ($pkgver) is different from latest NPM version ($npmver), publishing!" | |
| echo "shouldpublishnpm=true" >> $GITHUB_ENV | |
| fi | |
| - name: Setup Node | |
| if: env.shouldpublishnpm | |
| uses: actions/setup-node@v1 | |
| with: | |
| node-version: 12.x | |
| - name: Build and Publish | |
| id: build-and-publish | |
| if: env.shouldpublishnpm | |
| env: | |
| NPM_AUTH_TOKEN: ${{ secrets.NPM_AUTH_TOKEN }} | |
| run: | | |
| echo "//registry.npmjs.org/:_authToken=${NPM_AUTH_TOKEN}" > .npmrc | |
| yarn install | |
| yarn build | |
| npm publish ./dist --access public | |
| echo "::set-output name=didpublishnpm::true" | |
| docker: | |
| if: github.ref == 'refs/heads/main' | |
| runs-on: ubuntu-latest | |
| needs: [test, npm] | |
| permissions: | |
| id-token: write | |
| contents: read | |
| packages: write | |
| steps: | |
| - name: Check out source code | |
| uses: actions/checkout@v2 | |
| - name: Detect Dockerfile changes | |
| uses: dorny/paths-filter@v2 | |
| id: filter | |
| with: | |
| filters: | | |
| dockerchanged: | |
| - 'Dockerfile' | |
| - name: Should Build? | |
| if: steps.filter.outputs.dockerchanged == 'true' || needs.npm.outputs.didpublishnpm == 'true' | |
| run: | | |
| echo "Dockerfile changed, and/or new NPM module published. Need to update Docker image." | |
| echo "need_docker_build=true" >> $GITHUB_ENV | |
| - name: Login to DockerHub Registry | |
| if: env.need_docker_build | |
| uses: docker/login-action@v2 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Login to GHCR | |
| if: env.need_docker_build | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build the latest Docker image | |
| if: env.need_docker_build | |
| run: docker build . --file Dockerfile --tag jupiterone/peril:latest --tag ghcr.io/jupiterone/peril:latest | |
| - name: Push the latest Docker image to DockerHub | |
| if: env.need_docker_build | |
| run: docker push jupiterone/peril:latest | |
| - name: Push the latest Docker image to GHCR | |
| if: env.need_docker_build | |
| run: docker push ghcr.io/jupiterone/peril:latest |