eps-devcontainers/.github/workflows/build_all_images.yml at 2b3b24e99b56984ce503b3f0b263b20877d0f4f5 · NHSDigital/eps-devcontainers · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
name: build_all_images
'on':
  workflow_call:
    inputs:
      docker_tag:
        required: true
        type: string
      tag_latest:
        required: true
        type: boolean
      NO_CACHE:
        required: true
        type: boolean
env:
  BRANCH_NAME: '${{ github.event.pull_request.head.ref }}'
jobs:
  discover_folders:
    runs-on: ubuntu-latest
    outputs:
      base_node_folders: ${{ steps.find-folders.outputs.base_node }}
      node_24_language_folders: ${{ steps.find-folders.outputs.node_24_languages }}
      project_folders: ${{ steps.find-folders.outputs.projects }}
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd

      - id: find-folders
        run: |
          base_node_folders=$(find src/base_node -mindepth 1 -maxdepth 1 -type d -printf '%f\n' | jq -R -s -c 'split("\n")[:-1]')
          node_24_language_folders=$(find src/languages -mindepth 1 -maxdepth 1 -type d -name 'node_24*' -printf '%f\n' | jq -R -s -c 'split("\n")[:-1]')
          project_folders=$(find src/projects -mindepth 1 -maxdepth 1 -type d -printf '%f\n' | jq -R -s -c 'split("\n")[:-1]')
          {
            echo "base_node=$base_node_folders"
            echo "node_24_languages=$node_24_language_folders"
            echo "projects=$project_folders"
          } >> "$GITHUB_OUTPUT"
  download_trivy:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd
      - name: Install cosign
        run: |
          ./scripts/install_cosign.sh
        env:
          INSTALL_DIR: ${HOME}/.local/bin
      - name: Get amd64 trivy
        run: |
          ./scripts/install_trivy.sh
        env:
          INSTALL_DIR: trivy_amd64
          ARCH: 64bit
      - name: Get arm64 trivy
        run: |
          ./scripts/install_trivy.sh
        env:
          INSTALL_DIR: trivy_arm64
          ARCH: ARM64
      - uses: actions/upload-artifact@bbbca2ddaa5d8feaa63e36b76fdaad77386f024f
        name: Upload trivy
        with:
          name: "trivy"
          path: |
            trivy_amd64/trivy
            trivy_arm64/trivy

  package_base_docker_image:
    uses: ./.github/workflows/build_multi_arch_image.yml
    with:
      tag_latest: ${{ inputs.tag_latest }}
      docker_tag: ${{ inputs.docker_tag }}
      container_name: base
      base_folder: "."
      NO_CACHE: ${{ inputs.NO_CACHE }}
  package_base_node_images:
    needs:
      - package_base_docker_image
      - discover_folders
    strategy:
      fail-fast: false
      matrix:
            container_name: ${{ fromJson(needs.discover_folders.outputs.base_node_folders) }}
    uses: ./.github/workflows/build_multi_arch_image.yml
    with:
      tag_latest: ${{ inputs.tag_latest }}
      docker_tag: ${{ inputs.docker_tag }}
      container_name: ${{ matrix.container_name }}
      base_folder: "base_node"
      NO_CACHE: ${{ inputs.NO_CACHE }}
      EXTRA_COMMON: "common_node_24"
  package_node_24_language_docker_images:
    needs:
      - package_base_docker_image
      - package_base_node_images
      - discover_folders
    strategy:
      fail-fast: false
      matrix:
            container_name: ${{ fromJson(needs.discover_folders.outputs.node_24_language_folders) }}
    uses: ./.github/workflows/build_multi_arch_image.yml
    with:
      tag_latest: ${{ inputs.tag_latest }}
      docker_tag: ${{ inputs.docker_tag }}
      container_name: ${{ matrix.container_name }}
      base_folder: "languages"
      NO_CACHE: ${{ inputs.NO_CACHE }}
      EXTRA_COMMON: "common_node_24"
  package_project_docker_images:
    needs:
      - package_node_24_language_docker_images
      - discover_folders
    strategy:
      fail-fast: false
      matrix:
        container_name: ${{ fromJson(needs.discover_folders.outputs.project_folders) }}
    uses: ./.github/workflows/build_multi_arch_image.yml
    with:
      tag_latest: ${{ inputs.tag_latest }}
      docker_tag: ${{ inputs.docker_tag }}
      container_name: ${{ matrix.container_name }}
      base_folder: "projects"
      NO_CACHE: ${{ inputs.NO_CACHE }}
      EXTRA_COMMON: "common_node_24"