72 lines
2.4 KiB
YAML
72 lines
2.4 KiB
YAML
name: CodeQL + Docker Image
|
|
on:
|
|
push:
|
|
branches:
|
|
- master
|
|
|
|
jobs:
|
|
analyze:
|
|
name: CodeQL Analysis
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v2
|
|
with:
|
|
fetch-depth: 2
|
|
|
|
- name: Setup Node.JS
|
|
uses: actions/setup-node@v2
|
|
with:
|
|
node-version: "14"
|
|
# https://github.com/npm/cli/issues/558#issuecomment-580018468
|
|
# Error: "npm ERR! fsevents not accessible from jest-haste-map"
|
|
# (supposed to just be a warning b/c optional dependency, but CI environment causes it to fail)
|
|
- run: npm i
|
|
|
|
- name: Build codebase
|
|
run: npm run build
|
|
|
|
- name: Initialize CodeQL
|
|
uses: github/codeql-action/init@v1
|
|
with:
|
|
config-file: ./.github/codeql/codeql-config.yml
|
|
languages: javascript
|
|
|
|
- name: Perform CodeQL Analysis
|
|
uses: github/codeql-action/analyze@v1
|
|
|
|
build:
|
|
name: Build Docker Image
|
|
needs: analyze
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v2
|
|
with:
|
|
fetch-depth: 2
|
|
|
|
- name: Install Docker BuildX
|
|
id: buildx
|
|
uses: crazy-max/ghaction-docker-buildx@v1
|
|
with:
|
|
buildx-version: latest
|
|
|
|
- name: Login to Docker Hub
|
|
run: echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
|
|
|
|
- name: Build the image
|
|
run: |
|
|
docker buildx build \
|
|
--tag keanucode/travbot-v3:latest \
|
|
--platform linux/amd64,linux/arm/v7,linux/arm64 --push .
|
|
|
|
- name: Sync From Docker Hub to GitHub
|
|
uses: onichandame/docker-registry-sync-action@master
|
|
with:
|
|
source_repository: docker.io/keanucode/travbot-v3:latest
|
|
source_username: ${{ secrets.DOCKER_USERNAME }}
|
|
source_password: ${{ secrets.DOCKER_PASSWORD }}
|
|
target_repository: docker.pkg.github.com/keanuplayz/travbot-v3/travbot-v3:latest
|
|
target_username: ${{ secrets.GH_USERNAME }}
|
|
target_password: ${{ secrets.GH_TOKEN }}
|