push-components #17
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: push-components | |
| permissions: | |
| contents: write | |
| on: | |
| workflow_dispatch: | |
| inputs: | |
| tag: | |
| description: "The tag to be used when pushing components to the Docker Hub." | |
| required: true | |
| type: string | |
| ref: | |
| description: "The ref (branch or SHA) to process" | |
| required: true | |
| type: string | |
| default: "main" | |
| defaults: | |
| run: | |
| shell: bash -xe {0} | |
| jobs: | |
| push-components: | |
| runs-on: ubuntu-24.04 | |
| steps: | |
| - uses: actions/checkout@v5 | |
| with: | |
| ref: ${{ github.event.inputs.ref }} # Use the ref if provided, otherwise defaults to the current branch/commit | |
| - uses: nixbuild/nix-quick-install-action@v33 | |
| with: | |
| github_access_token: ${{ secrets.GITHUB_TOKEN }} | |
| nix_conf: | | |
| extra-substituters = https://cache.garnix.io | |
| extra-trusted-public-keys = cache.garnix.io:CTFPyKSLcx5RMJKfLo5EEPUObbA78b0YQ2DTCJXqr9g | |
| - name: Populate the nix store | |
| run: | | |
| nix develop --command echo | |
| - name: Log in to Docker Hub | |
| run: | | |
| echo "$DOCKER_HUB_TOKEN" | docker login -u "$DOCKER_HUB_USERNAME" --password-stdin | |
| env: | |
| DOCKER_HUB_USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }} | |
| DOCKER_HUB_TOKEN: ${{ secrets.DOCKER_HUB_TOKEN }} | |
| - name: Run push-components.sh | |
| run: | | |
| nix develop --command ./scripts/push-components.sh $TAG | |
| env: | |
| TAG: ${{ github.event.inputs.tag }} | |
| - name: Configure git before push | |
| run: | | |
| git config user.name "github-actions[bot]" | |
| git config user.email "github-actions[bot]@users.noreply.github.com" | |
| - name: Push obelisk-oci.toml | |
| run: | | |
| git add obelisk-oci.toml | |
| git commit -m "chore: Bump components to $TAG" | |
| git remote set-url origin https://x-access-token:${GITHUB_TOKEN}@github.com/${{ github.repository }}.git | |
| git push origin ${{ github.event.inputs.ref }} | |
| env: | |
| TAG: ${{ github.event.inputs.tag }} | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} |