chore(mafia-vue): bump trigger_build (PR #17) #157
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # on: [push] | |
| on: [push, pull_request] | |
| # on: | |
| # push: | |
| # branches: [main] # post-merge commits to main only | |
| # pull_request: # everything in feature branches goes through PR event | |
| name: Build Mafia Components And Submit Metadata To Reliza ReARM (psclaude) | |
| jobs: | |
| build-mafia-vue: | |
| permissions: | |
| contents: read | |
| id-token: write | |
| name: Build And Push mafia-vue | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Build And Push mafia-vue to ReARM (psclaude) | |
| uses: relizaio/rearm-docker-action@ca8c919da76a05706c552866e09c7d2f6e342402 | |
| with: | |
| registry_username: ${{ secrets.DOCKER_LOGIN }} | |
| registry_password: ${{ secrets.DOCKER_TOKEN }} | |
| registry_host: registry.test.relizahub.com | |
| image_namespace: registry.test.relizahub.com/fd4383f4-bdef-488e-9578-cd2e4a6b48bc-public | |
| image_name: mafia-vue | |
| rearm_api_id: ${{ secrets.REARM_API_ID }} | |
| rearm_api_key: ${{ secrets.REARM_API_KEY }} | |
| rearm_api_url: https://psclaude.rearmhq.com | |
| path: mafia-vue | |
| enable_sbom: true | |
| source_code_sbom_type: npm | |
| create_component: 'true' | |
| build-mafia-express: | |
| permissions: | |
| contents: read | |
| id-token: write | |
| name: Build And Push mafia-express | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Build And Push mafia-express to ReARM (psclaude) | |
| uses: relizaio/rearm-docker-action@ca8c919da76a05706c552866e09c7d2f6e342402 | |
| with: | |
| registry_username: ${{ secrets.DOCKER_LOGIN }} | |
| registry_password: ${{ secrets.DOCKER_TOKEN }} | |
| registry_host: registry.test.relizahub.com | |
| image_namespace: registry.test.relizahub.com/fd4383f4-bdef-488e-9578-cd2e4a6b48bc-public | |
| image_name: mafia-express | |
| rearm_api_id: ${{ secrets.REARM_API_ID }} | |
| rearm_api_key: ${{ secrets.REARM_API_KEY }} | |
| rearm_api_url: https://psclaude.rearmhq.com | |
| path: mafia-express | |
| enable_sbom: true | |
| source_code_sbom_type: npm | |
| create_component: 'true' | |
| build-mafia-helm: | |
| permissions: | |
| contents: write | |
| id-token: write | |
| name: Build And Push mafia Helm Chart | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Build mafia Helm Chart and push to ReARM (psclaude) | |
| uses: relizaio/rearm-helm-action@main | |
| with: | |
| registry_username: ${{ secrets.DOCKER_LOGIN }} | |
| registry_password: ${{ secrets.DOCKER_TOKEN }} | |
| registry_host: registry.test.relizahub.com/fd4383f4-bdef-488e-9578-cd2e4a6b48bc-public | |
| helm_chart_name: mafia | |
| rearm_api_id: ${{ secrets.REARM_API_ID }} | |
| rearm_api_key: ${{ secrets.REARM_API_KEY }} | |
| rearm_api_url: https://psclaude.rearmhq.com | |
| enable_sbom: true | |
| path: mafia-helm | |
| create_component: 'true' | |
| limit_to_branches: main | |
| submit-mafia-test-harness: | |
| permissions: | |
| contents: read | |
| id-token: write | |
| name: Submit mafia-test-harness Metadata | |
| runs-on: ubuntu-latest | |
| # Serialize to avoid two parallel push+pull_request invocations both calling | |
| # getversion --createcomponent and racing into duplicate components. | |
| concurrency: | |
| group: submit-mafia-test-harness-${{ github.ref }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 | |
| with: | |
| fetch-depth: 0 | |
| - name: Setup ReARM CLI | |
| uses: relizaio/rearm-actions/setup-cli@4067b5574caa4cde198836c09dfa2375866d78b8 | |
| - name: Initialize ReARM Release | |
| id: init | |
| uses: relizaio/rearm-actions/initialize@4067b5574caa4cde198836c09dfa2375866d78b8 | |
| with: | |
| rearm_api_key: ${{ secrets.REARM_API_KEY }} | |
| rearm_api_id: ${{ secrets.REARM_API_ID }} | |
| rearm_api_url: https://psclaude.rearmhq.com | |
| repo_path: test-harness | |
| create_component: 'true' | |
| - name: Generate npm SBOM | |
| if: steps.init.outputs.do_build == 'true' | |
| working-directory: test-harness | |
| run: | | |
| npm install --global @cyclonedx/cyclonedx-npm@4.2.1 --ignore-scripts | |
| npm ci --ignore-scripts | |
| cyclonedx-npm --flatten-components > fs.cdx.bom.json | |
| du -h fs.cdx.bom.json | |
| - name: Submit release metadata to ReARM | |
| if: steps.init.outputs.do_build == 'true' | |
| working-directory: test-harness | |
| env: | |
| REARM_API_ID: ${{ secrets.REARM_API_ID }} | |
| REARM_API_KEY: ${{ secrets.REARM_API_KEY }} | |
| run: | | |
| set -e | |
| rearm_branch_name="${{ github.head_ref || github.ref_name }}" | |
| scearts='[{"bomFormat":"CYCLONEDX","type":"BOM","filePath":"./fs.cdx.bom.json"}]' | |
| rearm addrelease \ | |
| --apikeyid "$REARM_API_ID" \ | |
| --apikey "$REARM_API_KEY" \ | |
| -u https://psclaude.rearmhq.com \ | |
| -b "$rearm_branch_name" \ | |
| -v "${{ steps.init.outputs.full_version }}" \ | |
| --lifecycle ASSEMBLED \ | |
| --vcstype git \ | |
| --vcsuri "${{ github.server_url }}/${{ github.repository }}" \ | |
| --repo-path test-harness \ | |
| --commit "${{ steps.init.outputs.sce_commit }}" \ | |
| --commitmessage "${{ steps.init.outputs.sce_commit_message }}" \ | |
| --date "${{ steps.init.outputs.sce_commit_date }}" \ | |
| --commits "${{ steps.init.outputs.commit_list }}" \ | |
| --datestart "${{ steps.init.outputs.build_start }}" \ | |
| --dateend "$(date -Iseconds)" \ | |
| --scearts "$scearts" |