Skip to content

docs(examples): add vm-deploy bundle, fix creds key, ignore generated dir #129

docs(examples): add vm-deploy bundle, fix creds key, ignore generated dir

docs(examples): add vm-deploy bundle, fix creds key, ignore generated dir #129

---
name: Build, Push & Scan Container Image
on:
push:
branches:
- main
pull_request:
branches:
- main
workflow_dispatch:
concurrency:
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
cancel-in-progress: true
jobs:
build-scan:
name: Build, Push to ttl.sh & Scan
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
steps:
- name: Checkout
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
with:
submodules: true
fetch-depth: 0
- name: Set build metadata
id: meta
run: |
echo "commit=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
- name: Build & push to ttl.sh
uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8.4.1
with:
version: "0.20.0"
verb: call
module: github.com/stuttgart-things/blueprints/kubernetes-microservice@v1.71.0
args: >-
bake-image
--src .
--repository-name stuttgart-things/provider-vspherevm
--tag ${{ steps.meta.outputs.commit }}
--registry-url ttl.sh
--dockerfile cluster/images/provider-vspherevm/Dockerfile
env:
DAGGER_CLOUD_TOKEN: ${{ secrets.DAGGER_CLOUD_TOKEN }}
- name: Scan image
uses: dagger/dagger-for-github@27b130bf0f79a7f6fbbbe0fbca6760dc9bb40a77 # v8.4.1
with:
version: "0.20.0"
verb: call
module: github.com/stuttgart-things/blueprints/kubernetes-microservice@v1.71.0
args: >-
scan-image
--image-ref ttl.sh/stuttgart-things/provider-vspherevm:${{ steps.meta.outputs.commit }}
--severity HIGH,CRITICAL
env:
DAGGER_CLOUD_TOKEN: ${{ secrets.DAGGER_CLOUD_TOKEN }}