vigilante/.github/workflows/publish.yml at 1af2280c0a607b09a7fae85cc57f0308a0145e46 · babylonlabs-io/vigilante · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
name: docker_publish

on:
  push:
    branches:
      - 'release/*'
    tags:
      - '*'
  workflow_dispatch:
    inputs:
      skip-lint-test:
        description: "Skip tests"
        required: false
        type: boolean
        default: false

jobs:
  lint_test:
    uses: babylonlabs-io/.github/.github/workflows/reusable_go_lint_test.yml@847cd8a6ff9c64e401ce922d12532979d9ac5e93 # v0.14.5
    if: ${{ !(github.event_name == 'workflow_dispatch' && inputs['skip-lint-test'] == true) }}
    with:
      go-version: '1.25'
      go-lint-version: 'v2.4.0'
      run-unit-tests: true
      run-integration-tests: true
      run-lint: true
      run-gosec: true
      gosec-args: "-exclude-generated -exclude-dir=e2etest -exclude-dir=testutil ./..."
      install-dependencies-command: |
        sudo apt-get update
        sudo apt-get install -y libzmq3-dev
    permissions:
      # required for all workflows
      security-events: write
      # required to fetch internal or private CodeQL packs
      packages: read

  docker_pipeline:
    # Always evaluate, but only proceed if:
    # - skip is enabled, or lint_test succeeded (normal path)
    if: ${{ always() && (
            (github.event_name == 'workflow_dispatch' && inputs['skip-lint-test'] == true) ||
            needs.lint_test.result == 'success'
          )}}
    needs: ["lint_test"]
    uses: babylonlabs-io/.github/.github/workflows/reusable_docker_pipeline.yml@847cd8a6ff9c64e401ce922d12532979d9ac5e93 # v0.14.5
    secrets: inherit
    with:
      publish: true
      docker_scan: true
    permissions:
      # required for all workflows
      security-events: write
      # required to fetch internal or private CodeQL packs
      packages: read