lfx-v2-access-check/.github/workflows/ko-build-main.yaml at 519d84ab3fe5602ab1d881ea24e9bdc7d800db8e · linuxfoundation/lfx-v2-access-check · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
# Copyright The Linux Foundation and each contributor to LFX.
# SPDX-License-Identifier: MIT
---
name: Publish Main

'on':
  push:
    branches:
      - main
  workflow_dispatch:

permissions:
  contents: read

jobs:
  publish:
    name: Publish Main
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd  # v6.0.2
      - uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5  # v6.2.0
        with:
          go-version-file: go.mod
      - uses: ko-build/setup-ko@d006021bd0c28d1ce33a07e7943d48b079944c8d  # v0.9
        with:
          version: v0.17.1
      - name: Build and publish service image
        env:
          VERSION: development
          GIT_COMMIT: ${{ github.sha }}
        run: |
          BUILD_TIME=$(date -u '+%Y-%m-%d_%H:%M:%S')
          export BUILD_TIME
          GIT_COMMIT=${GIT_COMMIT:0:7}
          export GIT_COMMIT
          ko build github.com/linuxfoundation/lfx-v2-access-check/cmd/lfx-access-check \
            -B \
            --platform linux/amd64,linux/arm64 \
            -t ${{ github.sha }} \
            -t development \
            --sbom spdx