Initial commit #1
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and publish a Wasm Component to GitHub Artifacts | |
| on: | |
| push: | |
| tags: | |
| - v* | |
| workflow_dispatch: | |
| env: | |
| IMAGE_NAME: ${{ github.repository }} | |
| CARGO_COMPONENT_VERSION: "0.16.0" | |
| COMPONENT_NAME: udp-echo-server | |
| COMPONENT_NAME_UNDERSCORED: udp_echo_server | |
| jobs: | |
| publish: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write | |
| packages: write | |
| contents: read | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v2 | |
| - name: Install cargo-binstall | |
| uses: cargo-bins/[email protected] | |
| - name: Docker meta | |
| id: meta | |
| uses: docker/metadata-action@v5 | |
| with: | |
| images: ghcr.io/${{ github.actor }}/{{ env.COMPONENT_NAME }} | |
| tags: | | |
| type=semver,pattern={{version}} | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v3 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Install cosign | |
| if: github.event_name != 'workflow_dispatch' | |
| uses: sigstore/[email protected] | |
| - name: Cache cargo bin | |
| id: cache-cargo | |
| uses: actions/cache@v3 | |
| env: | |
| cache-name: cache-cargo-bin | |
| with: | |
| path: ~/.cargo/bin | |
| key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ hashFiles('scripts/install.sh') }} | |
| restore-keys: | | |
| ${{ runner.os }}-build-${{ env.cache-name }}- | |
| ${{ runner.os }}-build- | |
| ${{ runner.os }}- | |
| - if: ${{ steps.cache-cargo.outputs.cache-hit != 'true' }} | |
| name: Install build dependencies | |
| continue-on-error: false | |
| run: | | |
| cargo binstall cargo-component --force --version ${{ env.CARGO_COMPONENT_VERSION }} | |
| cargo binstall wkg --force | |
| cargo binstall cargo-auditable cargo-audit | |
| - name: Build the component | |
| run: cargo auditable component build --release | |
| - name: Publish `:<version>` to GitHub Container Registry | |
| if: github.event_name != 'workflow_dispatch' | |
| id: publish_versioned | |
| uses: bytecodealliance/wkg-github-action@v5 | |
| with: | |
| file: target/wasm32-wasip1/release/${{ env.COMPONENT_NAME_UNDERSCORED }}.wasm | |
| oci-reference-without-tag: ghcr.io/${{ env.IMAGE_NAME }}/${{ env.COMPONENT_NAME }} | |
| version: ${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.version'] }} | |
| - name: Sign the versioned wasm component | |
| if: github.event_name != 'workflow_dispatch' | |
| run: cosign sign --yes ghcr.io/${{ env.IMAGE_NAME }}/${{ env.COMPONENT_NAME }}@${{ steps.publish_versioned.outputs.digest }} | |
| - name: Publish `:latest` release to GitHub Container Registry | |
| if: github.event_name != 'workflow_dispatch' | |
| id: publish_latest | |
| uses: bytecodealliance/wkg-github-action@v5 | |
| with: | |
| file: target/wasm32-wasip1/release/${{ env.COMPONENT_NAME_UNDERSCORED }}.wasm | |
| oci-reference-without-tag: ghcr.io/${{ env.IMAGE_NAME }}/${{ env.COMPONENT_NAME }} | |
| version: latest | |
| - name: Sign the latest wasm component | |
| if: github.event_name != 'workflow_dispatch' | |
| run: cosign sign --yes ghcr.io/${{ env.IMAGE_NAME }}/${{ env.COMPONENT_NAME }}@${{ steps.publish_latest.outputs.digest }} | |