DIA-3557: Update yammlint GitHub Action

Author: ricoberger

.github/release-drafter.yml

@@ -1,37 +1,28 @@
-name-template: 'v$RESOLVED_VERSION'
-tag-template: 'v$RESOLVED_VERSION'
+name-template: "$RESOLVED_VERSION"
+tag-template: "v$RESOLVED_VERSION"
 categories:
-  - title: '🚀 Features'
+  - title: "🚀 Features"
     labels:
-      - 'feature'
-      - 'enhancement'
-  - title: '🐛 Bug Fixes'
+      - "feature"
+      - "enhancement"
+  - title: "🐛 Bug Fixes"
     labels:
-      - 'fix'
-      - 'bugfix'
-      - 'bug'
-  - title: '🧹 Maintenance'
+      - "bug"
+  - title: "🧰 Maintenance"
     labels:
-      - 'chore'
-      - 'dependencies'
-version-resolver:
-  major:
+      - "maintenance"
+  - title: "📦 Dependencies"
     labels:
-      - 'feature'
-  minor:
+      - "docker dependency"
+      - "github dependency"
+      - "go dependency"
+  - title: "✏️ Documentation"
     labels:
-      - 'enhancement'
-  patch:
-    labels:
-      - 'fix'
-      - 'bugfix'
-      - 'bug'
-      - 'chore'
-      - 'dependencies'
-  default: patch
+      - "documentation"
+change-template: "- $TITLE @$AUTHOR (#$NUMBER)"
+exclude-labels:
+  - "skip-changelog"
 template: |
   ## Changes
 
   $CHANGES
-
-  **Full Changelog**: https://github.com/$OWNER/$REPOSITORY/compare/$PREVIOUS_TAG...v$RESOLVED_VERSION

.github/workflows/autodev.yaml

@@ -0,0 +1,17 @@
+---
+name: Autodev
+
+on:
+  push:
+    branches-ignore: [dev]
+  pull_request:
+    types: [labeled, unlabeled, closed]
+
+jobs:
+  autodev:
+    uses: Staffbase/gha-workflows/.github/workflows/[email protected]
+    with:
+      labels: true
+    secrets:
+      app_id: ${{ vars.STAFFBASE_ACTIONS_APP_ID }}
+      private_key: ${{ secrets.STAFFBASE_ACTIONS_PRIVATE_KEY }}

.github/workflows/build.yaml

@@ -0,0 +1,83 @@
+---
+name: Build & Deploy
+
+on:
+  push:
+    branches:
+      - main
+      - dev
+  pull_request:
+    types: [opened, synchronize, reopened]
+  release:
+    types: [published]
+
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: "go.mod"
+
+      - name: Test
+        run: go test ./...
+
+      - name: Build
+        run: go build -o ./yamllint-action .
+
+      - name: SonarCloud Scan
+        uses: SonarSource/[email protected]
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          SONAR_TOKEN: ${{ secrets.SONARCLOUD_TOKEN }}
+
+  push:
+    needs: test
+    runs-on: ubuntu-24.04
+    steps:
+      - name: Check out code
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Docker Metadata
+        id: metadata
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            staffbase/yamllint-action
+          tags: |
+            type=ref,event=branch
+            type=semver,pattern={{raw}}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Login to DockerHub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_PASSWORD }}
+
+      - name: Build and Push Docker Image
+        id: docker_build
+        uses: docker/build-push-action@v6
+        with:
+          push: true
+          context: .
+          file: ./Dockerfile
+          platforms: linux/amd64
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          tags: ${{ steps.metadata.outputs.tags }}
+          labels: ${{ steps.metadata.outputs.labels }}

.github/workflows/ci.yml

@@ -0,0 +1,14 @@
+---
+name: Release Drafter
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  release:
+    uses: Staffbase/gha-workflows/.github/workflows/[email protected]
+    secrets:
+      app_id: ${{ vars.STAFFBASE_ACTIONS_APP_ID }}
+      private_key: ${{ secrets.STAFFBASE_ACTIONS_PRIVATE_KEY }}

.github/workflows/release-drafter.yaml

@@ -9,16 +9,17 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM python:3.13.1-alpine3.19
-
-WORKDIR /go/src/github.com/Staffbase/yamllint-action
+FROM golang:1.24.1 AS build
+WORKDIR /yamllint-action
+COPY go.mod go.sum /yamllint-action/
+RUN go mod download
+COPY . .
+RUN export CGO_ENABLED=0 && go build -o ./yamllint-action .
 
+FROM python:3.13.1-alpine3.19
 RUN pip install --no-cache-dir yamllint==1.35.1 && \
     adduser --disabled-password --gecos "" --home "/nonexistent" --shell "/sbin/nologin" --no-create-home --uid 10001 appuser
-
-COPY yamllint-action /yamllint-action
+COPY --from=build /yamllint-action/yamllint-action /script_exporter
 COPY entrypoint.sh /entrypoint.sh
-
 USER appuser:appuser
-
 ENTRYPOINT ["/entrypoint.sh"]