Skip to content
Build and Push Docker Images

Add check for UID being zero in script #1472

Sign in to view logs

Add check for UID being zero in script

Add check for UID being zero in script #1472

Workflow file for this run

.github/workflows/push.yml at 79b515d
name: Build and Push Docker Images
on:
push:
paths-ignore:
- "renovate.json"
- "**/*.md"
workflow_dispatch:
inputs:
tag:
type: string
required: true
concurrency:
group: ${{ github.ref }}
cancel-in-progress: true
jobs:
lint:
runs-on: ubuntu-24.04
steps:
- uses: 'actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8' # v6
- name: lint
run: shellcheck ci/*.sh
#############################################################################
## Build.
#############################################################################
tags:
uses: ./.github/workflows/tags.yml
with:
# Use tag from workflow_dispatch OR push event
tag: ${{ inputs.tag && inputs.tag || github.ref_name }}
secrets: inherit
needs: lint
base:
uses: ./.github/workflows/build.yml
with:
image: base
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: tags
activemq:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.java.outputs.context }}
image: activemq
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, java]
alpaca:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.java.outputs.context }}
image: alpaca
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, java]
blazegraph:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.tomcat.outputs.context }}
image: blazegraph
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, tomcat]
cantaloupe:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.java.outputs.context }}
image: cantaloupe
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, java]
crayfish:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.nginx.outputs.context }}
image: crayfish
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, nginx]
crayfits:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.nginx.outputs.context }}
image: crayfits
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, scyllaridae]
drupal:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.nginx.outputs.context }}
image: drupal
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, nginx]
fcrepo6:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.tomcat.outputs.context }}
image: fcrepo6
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, tomcat]
fits:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.tomcat.outputs.context }}
image: fits
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, tomcat]
handle:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.java.outputs.context }}
image: handle
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, java]
homarus:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.scyllaridae.outputs.context }}
image: homarus
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, scyllaridae]
houdini:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.scyllaridae.outputs.context }}
image: houdini
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, scyllaridae, imagemagick]
hypercube:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.scyllaridae.outputs.context }}
image: hypercube
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, scyllaridae, leptonica]
imagemagick:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.base.outputs.context }}
image: imagemagick
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags]
java:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.base.outputs.context }}
image: java
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, base]
leptonica:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.base.outputs.context }}
image: leptonica
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags]
mariadb:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.base.outputs.context }}
image: mariadb
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, base]
mergepdf:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.scyllaridae.outputs.context }}
image: mergepdf
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, scyllaridae, imagemagick, leptonica]
milliner:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.crayfish.outputs.context }}
image: milliner
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, crayfish]
nginx:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.base.outputs.context }}
image: nginx
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, base]
postgresql:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.base.outputs.context }}
image: postgresql
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, base]
riprap:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.nginx.outputs.context }}
image: riprap
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, nginx]
scyllaridae:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.base.outputs.context }}
image: scyllaridae
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, base]
solr:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.java.outputs.context }}
image: solr
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, java]
test:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.drupal.outputs.context }}
image: test
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, drupal]
tomcat:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.java.outputs.context }}
image: tomcat
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, java]
transkribus:
uses: ./.github/workflows/build.yml
with:
contexts: ${{ needs.imagemagick.outputs.context }}
image: transkribus
repository: ${{ vars.repository }}
tags: ${{ needs.tags.outputs.tags }}
secrets: inherit
permissions:
contents: read
packages: write
needs: [tags, base, imagemagick]
#############################################################################
## Tests.
#############################################################################
test-base:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.base.outputs.digest }}
image: base
secrets: inherit
needs: [base]
test-activemq:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.activemq.outputs.digest }}
image: activemq
secrets: inherit
needs: [activemq]
test-alpaca:
uses: ./.github/workflows/test.yml
with:
digests: >-
${{ needs.activemq.outputs.digest }}
${{ needs.alpaca.outputs.digest }}
image: alpaca
secrets: inherit
needs:
- activemq
- alpaca
test-blazegraph:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.blazegraph.outputs.digest }}
image: blazegraph
secrets: inherit
needs: [blazegraph]
test-cantaloupe:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.cantaloupe.outputs.digest }}
image: cantaloupe
secrets: inherit
needs: [cantaloupe]
test-crayfish:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.crayfish.outputs.digest }}
image: crayfish
secrets: inherit
needs: [crayfish]
test-crayfits:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.crayfits.outputs.digest }}
image: crayfits
secrets: inherit
needs: [crayfits]
test-drupal:
uses: ./.github/workflows/test.yml
with:
digests: >-
${{ needs.drupal.outputs.digest }}
${{ needs.mariadb.outputs.digest }}
${{ needs.postgresql.outputs.digest }}
image: drupal
secrets: inherit
needs:
- drupal
- mariadb
- postgresql
test-fcrepo6:
uses: ./.github/workflows/test.yml
with:
digests: >-
${{ needs.activemq.outputs.digest }}
${{ needs.fcrepo6.outputs.digest }}
${{ needs.mariadb.outputs.digest }}
${{ needs.postgresql.outputs.digest }}
image: fcrepo6
secrets: inherit
needs:
- activemq
- fcrepo6
- mariadb
- postgresql
test-fits:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.fits.outputs.digest }}
image: fits
secrets: inherit
needs: [fits]
test-handle:
uses: ./.github/workflows/test.yml
with:
digests: >-
${{ needs.handle.outputs.digest }}
${{ needs.mariadb.outputs.digest }}
${{ needs.postgresql.outputs.digest }}
image: handle
secrets: inherit
needs:
- handle
- mariadb
- postgresql
test-homarus:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.homarus.outputs.digest }}
image: homarus
secrets: inherit
needs: [homarus]
test-houdini:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.houdini.outputs.digest }}
image: houdini
secrets: inherit
needs: [houdini]
test-hypercube:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.hypercube.outputs.digest }}
image: hypercube
secrets: inherit
needs: [hypercube]
test-java:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.java.outputs.digest }}
image: java
secrets: inherit
needs: [java]
test-mariadb:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.mariadb.outputs.digest }}
image: mariadb
secrets: inherit
needs: [mariadb]
test-mergepdf:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.mergepdf.outputs.digest }}
image: mergepdf
secrets: inherit
needs: [mergepdf]
test-milliner:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.milliner.outputs.digest }}
image: milliner
secrets: inherit
needs: [milliner]
test-nginx:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.nginx.outputs.digest }}
image: nginx
secrets: inherit
needs: [nginx]
test-postgresql:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.postgresql.outputs.digest }}
image: postgresql
secrets: inherit
needs: [postgresql]
test-riprap:
uses: ./.github/workflows/test.yml
with:
digests: >-
${{ needs.riprap.outputs.digest }}
${{ needs.mariadb.outputs.digest }}
${{ needs.postgresql.outputs.digest }}
image: riprap
secrets: inherit
needs:
- riprap
- mariadb
- postgresql
test-solr:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.solr.outputs.digest }}
image: solr
secrets: inherit
needs: [solr]
test-test:
uses: ./.github/workflows/test.yml
with:
digests: >-
${{ needs.activemq.outputs.digest }}
${{ needs.alpaca.outputs.digest }}
${{ needs.blazegraph.outputs.digest }}
${{ needs.crayfits.outputs.digest }}
${{ needs.fcrepo6.outputs.digest }}
${{ needs.fits.outputs.digest }}
${{ needs.homarus.outputs.digest }}
${{ needs.houdini.outputs.digest }}
${{ needs.hypercube.outputs.digest }}
${{ needs.mariadb.outputs.digest }}
${{ needs.milliner.outputs.digest }}
${{ needs.solr.outputs.digest }}
${{ needs.test.outputs.digest }}
image: test
secrets: inherit
needs:
- activemq
- alpaca
- blazegraph
- crayfits
- fcrepo6
- fits
- homarus
- houdini
- hypercube
- mariadb
- milliner
- solr
- test
test-tomcat:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.tomcat.outputs.digest }}
image: tomcat
secrets: inherit
needs: [tomcat]
test-transkribus:
uses: ./.github/workflows/test.yml
with:
digests: ${{ needs.transkribus.outputs.digest }}
image: transkribus
secrets: inherit
needs: [transkribus]
#############################################################################
## Grype.
#############################################################################
grype-base:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.base.outputs.digest }}
image: base
secrets: inherit
needs: [base]
grype-activemq:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.activemq.outputs.digest }}
image: activemq
secrets: inherit
needs: [activemq]
grype-alpaca:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.alpaca.outputs.digest }}
image: alpaca
secrets: inherit
needs: [alpaca]
grype-blazegraph:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.blazegraph.outputs.digest }}
image: blazegraph
secrets: inherit
needs: [blazegraph]
grype-cantaloupe:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.cantaloupe.outputs.digest }}
image: cantaloupe
secrets: inherit
needs: [cantaloupe]
grype-crayfish:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.crayfish.outputs.digest }}
image: crayfish
secrets: inherit
needs: [crayfish]
grype-crayfits:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.crayfits.outputs.digest }}
image: crayfits
secrets: inherit
needs: [crayfits]
grype-drupal:
uses: ./.github/workflows/grype.yml
with:
digest: >-
${{ needs.drupal.outputs.digest }}
image: drupal
secrets: inherit
needs: [drupal]
grype-fcrepo6:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.fcrepo6.outputs.digest }}
image: fcrepo6
secrets: inherit
needs: [fcrepo6]
grype-fits:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.fits.outputs.digest }}
image: fits
secrets: inherit
needs: [fits]
grype-handle:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.handle.outputs.digest }}
image: handle
secrets: inherit
needs: [handle]
grype-homarus:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.homarus.outputs.digest }}
image: homarus
secrets: inherit
needs: [homarus]
grype-houdini:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.houdini.outputs.digest }}
image: houdini
secrets: inherit
needs: [houdini]
grype-hypercube:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.hypercube.outputs.digest }}
image: hypercube
secrets: inherit
needs: [hypercube]
grype-java:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.java.outputs.digest }}
image: java
secrets: inherit
needs: [java]
grype-mariadb:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.mariadb.outputs.digest }}
image: mariadb
secrets: inherit
needs: [mariadb]
grype-milliner:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.milliner.outputs.digest }}
image: milliner
secrets: inherit
needs: [milliner]
grype-nginx:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.nginx.outputs.digest }}
image: nginx
secrets: inherit
needs: [nginx]
grype-postgresql:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.postgresql.outputs.digest }}
image: postgresql
secrets: inherit
needs: [postgresql]
grype-riprap:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.riprap.outputs.digest }}
image: riprap
secrets: inherit
needs: [riprap]
grype-solr:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.solr.outputs.digest }}
image: solr
secrets: inherit
needs: [solr]
grype-test:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.test.outputs.digest }}
image: test
secrets: inherit
needs: [test]
grype-tomcat:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.tomcat.outputs.digest }}
image: tomcat
secrets: inherit
needs: [tomcat]
grype-transkribus:
uses: ./.github/workflows/grype.yml
with:
digest: ${{ needs.transkribus.outputs.digest }}
image: transkribus
secrets: inherit
needs: [transkribus]