@@ -20,23 +20,28 @@ jobs:
2020 steps :
2121 - name : Checkout repository
2222 uses : actions/checkout@v4
23+
2324 - name : Install cosign
2425 uses : sigstore/cosign-installer@59acb6260d9c0ba8f4a2f9d9b48431a222b68e20 # v3.5.0
2526 with :
2627 cosign-release : ' v2.2.4'
28+
2729 - name : Set up Docker Buildx
2830 uses : docker/setup-buildx-action@f95db51fddba0c2d1ec667646a06c2ce06100226 # v3.0.0
31+
2932 - name : Log into registry ${{ env.REGISTRY }}
3033 uses : docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
3134 with :
3235 registry : ${{ env.REGISTRY }}
3336 username : ${{ github.actor }}
3437 password : ${{ secrets.GITHUB_TOKEN }}
38+
3539 - name : Extract Docker metadata
3640 id : meta
3741 uses : docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
3842 with :
3943 images : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
44+
4045 - name : Build and push Docker image
4146 id : build-and-push
4247 uses : docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
@@ -47,11 +52,30 @@ jobs:
4752 labels : ${{ steps.meta.outputs.labels }}
4853 cache-from : type=gha
4954 cache-to : type=gha,mode=max
55+
5056 - name : Sign the published Docker image
5157 env :
5258 TAGS : ${{ steps.meta.outputs.tags }}
5359 DIGEST : ${{ steps.build-and-push.outputs.digest }}
5460 run : echo "${TAGS}" | xargs -I {} cosign sign --yes {}@${DIGEST}
61+
62+ - name : Build debug image
63+ uses : docker/build-push-action@0565240e2d4ab88bba5387d719585280857ece09 # v5.0.0
64+ with :
65+ push : false
66+ target : build
67+ tags : sinytra/mm_wiki_debug
68+
69+ - name : Upload to sentry
70+ env :
71+ SENTRY_AUTH_TOKEN : ${{ secrets.SENTRY_AUTH_TOKEN }}
72+ run : |
73+ docker run --rm -e SENTRY_AUTH_TOKEN -e SENTRY_ORG -e SENTRY_PROJECT sinytra/mm_wiki_debug /bin/bash -c "
74+ sentry-cli debug-files upload --include-sources build/bin/wiki_service build/bin/wiki_service.debug
75+ LIBS=\$(ldd build/bin/wiki_service | awk '/=>/ {print \$3}' | grep '^/')
76+ sentry-cli debug-files upload --include-sources \$LIBS
77+ "
78+
5579 deploy :
5680 name : Deploy to server
5781 runs-on : ubuntu-latest
0 commit comments