Skip to content

Commit 24eb346

Browse files
sbe-argsbe-arg
committed
push v0.1.0
1 parent efefbb8 commit 24eb346

15 files changed

+471
-0
lines changed

‎.github/ISSUE_TEMPLATE/bug.md

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
---
2+
name: Bug submission
3+
about: There is a problem with the action
4+
title: ''
5+
labels: 'bug'
6+
assignees: ''
7+
---
8+
9+
**What is the problem you are experiencing? Please describe.**
10+
A clear and concise description of what the problem you are experiencing is.
11+
12+
**Paste your runner logs here**
13+
A clear and concise description of what you want to happen.

‎.github/ISSUE_TEMPLATE/feature_request.md

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
---
2+
name: Feature request
3+
about: I need additional functionality
4+
title: ''
5+
labels: 'feature'
6+
assignees: ''
7+
---
8+
9+
**What are you proposing we add or change? Please describe.**
10+
A clear and concise description of what the end result of this request looks like.
11+
12+
**Additional context**
13+
Anything else to add.

‎.github/dependabot.yaml

+8
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
version: 2
2+
updates:
3+
4+
# Maintain dependencies for GitHub Actions
5+
- package-ecosystem: "github-actions"
6+
directory: "/"
7+
schedule:
8+
interval: "weekly"

‎.github/pull_request_template.md

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
<!--- Provide a general summary of your changes in the Title above -->
2+
<!--- See [CONTRIBUTING.md](CONTRIBUTING.md). -->
3+
# Summary of changes
4+
5+
<!--- Describe your changes -->
6+
7+
# Does it keep it simple?
8+
9+
(**YES** / NO)
10+
11+
## Breaking Changes?
12+
13+
(**YES** / NO)
14+
15+
## How changes have been tested?, link to your runs
16+
17+
-
18+
19+
## Any unknowns or heads ups?
20+
21+
-

‎.github/workflows/dependency-review.yml

+19
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
name: dependency-review
2+
on: [pull_request]
3+
4+
permissions:
5+
contents: read
6+
7+
jobs:
8+
9+
dependency-review:
10+
runs-on: ubuntu-22.04
11+
steps:
12+
13+
- uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
14+
with:
15+
egress-policy: audit
16+
17+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
18+
19+
- uses: actions/dependency-review-action@7d90b4f05fea31dde1c4a1fb3fa787e197ea93ab # v3.0.7

‎.github/workflows/scorecard.yml

+51
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
name: scorecard
2+
on:
3+
schedule:
4+
- cron: '00 1 * * 1'
5+
push:
6+
branches: [ "master" ]
7+
8+
permissions:
9+
contents: read
10+
11+
concurrency:
12+
group: ${{ github.repository }}/${{ github.workflow }}/${{ github.ref }}
13+
cancel-in-progress: true
14+
15+
jobs:
16+
analysis:
17+
name: Scorecard analysis
18+
runs-on: ubuntu-latest
19+
permissions:
20+
security-events: write
21+
id-token: write
22+
23+
steps:
24+
- uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
25+
with:
26+
egress-policy: audit
27+
28+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
29+
with:
30+
persist-credentials: false
31+
32+
- uses: ossf/scorecard-action@08b4669551908b1024bb425080c797723083c031 # v2.2.0
33+
with:
34+
results_file: results.sarif
35+
results_format: sarif
36+
37+
# Public repositories:
38+
# - Publish results to OpenSSF REST API for easy access by consumers
39+
# - Allows the repository to include the Scorecard badge.
40+
# - See https://github.com/ossf/scorecard-action#publishing-results.
41+
publish_results: true
42+
43+
- uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
44+
with:
45+
name: SARIF file
46+
path: results.sarif
47+
retention-days: 5
48+
49+
- uses: github/codeql-action/upload-sarif@a09933a12a80f87b87005513f0abb1494c27a716 # v2.21.4
50+
with:
51+
sarif_file: results.sarif

‎.github/workflows/simple.yml

+36
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,36 @@
1+
name: tag-and-release
2+
3+
on:
4+
push:
5+
branches:
6+
- master
7+
8+
permissions:
9+
contents: read
10+
11+
concurrency:
12+
group: ${{ github.repository }}/${{ github.workflow }}/${{ github.ref }}
13+
cancel-in-progress: false
14+
15+
jobs:
16+
17+
flow:
18+
runs-on: ubuntu-22.04
19+
permissions:
20+
contents: write
21+
steps:
22+
- uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
23+
with:
24+
egress-policy: audit
25+
26+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
27+
with:
28+
fetch-depth: '0'
29+
30+
- name: simple-tag-and-release
31+
uses: sbe-arg/simple-tags-and-releases@fd774635aa3f4ea19faab61ad46a36e6c165ed24 # v0.3.2
32+
with:
33+
autogenerated_notes: 'true'
34+
version_file: 'VERSION'
35+
env:
36+
GH_TOKEN: ${{ github.token }}

‎.github/workflows/version-reminder.yml

+69
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,69 @@
1+
name: version-reminder
2+
3+
on:
4+
pull_request:
5+
types:
6+
- opened
7+
8+
permissions:
9+
contents: read
10+
11+
concurrency:
12+
group: ${{ github.repository }}/${{ github.workflow }}/${{ github.ref }}
13+
cancel-in-progress: true
14+
15+
jobs:
16+
17+
version-reminder:
18+
name: version-reminder
19+
runs-on: ubuntu-22.04
20+
timeout-minutes: 1
21+
permissions:
22+
pull-requests: write
23+
24+
steps:
25+
- uses: step-security/harden-runner@8ca2b8b2ece13480cda6dacd3511b49857a23c09 # v2.5.1
26+
with:
27+
egress-policy: audit
28+
29+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
30+
with:
31+
ref: master
32+
33+
- name: version-check
34+
id: version_check
35+
if: hashFiles('VERSION')
36+
run: |
37+
VERSION_FILE="VERSION"
38+
setOutput() {
39+
echo "${1}=${2}" >> "${GITHUB_OUTPUT}"
40+
}
41+
git fetch origin master
42+
if ! git diff --unified=0 origin/master.. -- $VERSION_FILE | grep '^[+-]' | grep -i "version" >/dev/null
43+
then
44+
echo "remind bumping"
45+
setOutput "remind" 'true'
46+
else
47+
echo "version is being BUMPED $(cat $VERSION_FILE)"
48+
setOutput "remind" 'false'
49+
fi
50+
51+
- name: version-reminder-comment
52+
if: hashFiles('VERSION') && steps.version_check.outputs.remind == 'true'
53+
uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6.4.1
54+
with:
55+
github-token: ${{ secrets.GITHUB_TOKEN }}
56+
script: |
57+
const backtick = '`';
58+
const body = `
59+
### :bulb: **Don't forget to bump the VERSION file**
60+
61+
By bumping the version in ${backtick}VERSION${backtick} file, we trigger a repo TAG and repo RELEASE, else nothing happens.
62+
`.trim();
63+
64+
github.rest.issues.createComment({
65+
issue_number: context.payload.pull_request.number,
66+
owner: context.repo.owner,
67+
repo: context.repo.repo,
68+
body
69+
});

‎CONTRIBUTING.md

+6
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
## how to contribute
2+
3+
- fork edit action.yml
4+
- test locally point to your own fork
5+
- open pr, link to runs from your fork
6+
- explain in the pr why is keeping things simple while adding value

‎LICENSE.md

+22
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
2+
The MIT License (MIT)
3+
4+
Copyright (c) 2023 Santiago Bernhardt
5+
6+
Permission is hereby granted, free of charge, to any person obtaining a copy
7+
of this software and associated documentation files (the "Software"), to deal
8+
in the Software without restriction, including without limitation the rights
9+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
10+
copies of the Software, and to permit persons to whom the Software is
11+
furnished to do so, subject to the following conditions:
12+
13+
The above copyright notice and this permission notice shall be included in all
14+
copies or substantial portions of the Software.
15+
16+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
17+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
18+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
19+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
20+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
21+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
22+
SOFTWARE.

‎README.md

+71
Original file line numberDiff line numberDiff line change
@@ -1 +1,72 @@
11
# simple-compose-service-updates
2+
3+
## USAGE
4+
5+
```yaml
6+
with:
7+
default_branch: 'main|master|other' # defaults to 'master'
8+
skips: 'mongodb:6' # defaults to '', example: 'skip:1,other:3'
9+
```
10+
11+
```yaml
12+
name: compose-service-updates
13+
14+
on:
15+
push:
16+
branches:
17+
- master
18+
19+
permissions:
20+
contents: read
21+
pull-requests: read
22+
23+
jobs:
24+
25+
flow:
26+
runs-on: ubuntu-22.04
27+
permissions:
28+
contents: write
29+
pull-requests: write
30+
steps:
31+
32+
- uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3
33+
with:
34+
fetch-depth: '0'
35+
36+
- name: setup-git
37+
run: |
38+
git config --global user.name "GitHub Actions"
39+
git config --global user.email "[email protected]"
40+
41+
- name: simple-compose-service-updates
42+
uses: sbe-arg/[email protected] # use sha pinning when possible
43+
with:
44+
default_branch: 'main'
45+
skips: 'mongodb:6,postgresql-repmgr:15' # examples
46+
env:
47+
GH_TOKEN: ${{ github.token }} # required
48+
```
49+
50+
## requirements:
51+
52+
- your compose files must be on your repo root.
53+
- your compose files must match '\*compose\*.yaml' or '\*compose\*.yml'
54+
- your images in compose files must include the full registry:
55+
- docker.io/somecompany/theimage:x.x.x
56+
- mcr.microsoft.com/part/theimage:x.x.x
57+
58+
## what for:
59+
60+
- find compose services and bump them using prs
61+
62+
## supported registries
63+
64+
- dockerhub
65+
- microsoft mcr
66+
- other? open an issue or open pr
67+
68+
## what does it look like
69+
70+
- runs: [link](https://github.com/sbe-arg/simple-compose-service-updates/actions/workflows/simple.yml)
71+
- releases: [link](https://github.com/sbe-arg/simple-compose-service-updates/releases)
72+
- tags: [link](https://github.com/sbe-arg/simple-compose-service-updates/tags)

‎SECURITY.md

+4
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
## Reporting a Vulnerability
2+
3+
Please report (suspected) security vulnerabilities via issues **[advisory](https://github.com/sbe-arg/simple-compose-service-updates/security/advisories/new)** this allows transparent disclosure.
4+
If the issue is valid and accepted, we will release a patch as soon as possible depending on complexity but ideally within 30 days.

‎VERSION

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
v0.1.0

‎action.yml

+21
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
name: 'Simple compose service updates'
2+
description: 'Simple compose service update process for your repos'
3+
inputs:
4+
default_branch:
5+
description: 'Path to file'
6+
required: false
7+
default: 'master'
8+
skips:
9+
description: 'Skip some services'
10+
required: false
11+
default: ''
12+
runs:
13+
using: composite
14+
steps:
15+
- name: compose service updates
16+
shell: bash
17+
run: |
18+
default_branch=${{ inputs.default_branch }}
19+
skips=${{ inputs.skips }}
20+
21+
${{ github.action_path }}/bin/pincher.sh "$default_branch" "$skips"

0 commit comments

Comments
 (0)