Skip to content

chore(deps): update workflows non-major dependencies #17

chore(deps): update workflows non-major dependencies

chore(deps): update workflows non-major dependencies #17

name: Build Internal Container
on:
pull_request:
# Only consider PRs that change files for this asset, including ci scripts
paths:
- '.github/workflows/internal-container.yaml'
- 'containers/internal/**'
# Make sure all workflows that are "required checks" for a given
# branch protection rule have the same paths: and branches-ignore:
# filters. Otherwise, you can end up in a deadlock waiting on a
# required check that will never be executed.
push:
# Only release off of release and maintenance branches for this asset
branches:
- 'maintenance/internal-container/[0-9]+.x.x'
- 'maintenance/internal-container/[0-9]+.[0-9]+.x'
- 'main'
# Only consider pushes that change files for this asset, including ci scripts
paths:
- '.github/workflows/internal-container.yaml'
- 'containers/internal/**'
permissions:
contents: write
pull-requests: write
actions: read
concurrency:
group: ${{ github.workflow }}-${{ github.ref }}
# Cancel early on pull requests if new commits are added,
# Don't cancel on release pushes
cancel-in-progress: ${{ github.event_name == 'pull_request' }}
jobs:
# Job name must be unique across repo to target
# branch protection rules "required checks" properly!
internal-container:
uses: SwanseaUniversityMedical/workflows/.github/workflows/pr-and-release-container.yaml@v2.0.3-containers
with:
job-name: internal-container
comment-pr: "true"
comment-release: "true"
registry: ${{ vars.HARBOR_REGISTRY }}
registry-user: ${{ vars.HARBOR_USER }}
registry-repo: ${{ vars.HARBOR_PROJECT }}/internal
release-tag-format: 'v${version}-internal-container'
cosign-public-key: ${{ vars.COSIGN_PUBLIC_KEY }}
build-file: containers/internal/Dockerfile
build-context: containers/internal
secrets:
cosign-private-key: ${{ secrets.COSIGN_PRIVATE_KEY }}
cosign-password: ${{ secrets.COSIGN_PASSWORD }}
registry-token: ${{ secrets.HARBOR_TOKEN }}