[WIP] Adding an example of a Jenkins CI enviornment using OIDC and optional Harbor pull-through mirror #468
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: build | |
| on: | |
| pull_request: | |
| permissions: {} | |
| jobs: | |
| build: | |
| name: build | |
| runs-on: ubuntu-latest | |
| strategy: | |
| matrix: | |
| image: | |
| - aws-auth | |
| - github-issue-opener | |
| - image-copy-ecr | |
| - image-copy-gcp | |
| - image-diff | |
| - jira-issue-opener | |
| - slack-webhook | |
| - tag-history | |
| steps: | |
| - name: Harden the runner (Audit all outbound calls) | |
| uses: step-security/harden-runner@20cf305ff2072d973412fa9b1e3a4f227bda3c76 # v2.14.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 | |
| - uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2 | |
| with: | |
| go-version-file: ${{ matrix.image }}/go.mod | |
| - uses: ko-build/setup-ko@3aebd0597dc1e9d1a26bcfdb7cbeb19c131d3037 # v0.7 | |
| - uses: chainguard-dev/actions/setup-registry@3e8a2a226fad9e1ecbf2d359b8a7697554a4ac6d # main | |
| - working-directory: ${{ matrix.image }} | |
| run: | | |
| KO_DOCKER_REPO=localhost:1338/test ko build --image-refs=ko.images --bare . | |
| echo "KO build $(cat ko.images)" |