mirror of
https://github.com/etcd-io/etcd.git
synced 2024-09-27 06:25:44 +00:00
73 lines
2.5 KiB
YAML
73 lines
2.5 KiB
YAML
---
|
|
name: Release
|
|
on: [push, pull_request]
|
|
permissions: read-all
|
|
jobs:
|
|
main:
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
|
|
- id: goversion
|
|
run: echo "goversion=$(cat .go-version)" >> "$GITHUB_OUTPUT"
|
|
- uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
|
|
with:
|
|
go-version: ${{ steps.goversion.outputs.goversion }}
|
|
- name: release
|
|
run: |
|
|
set -euo pipefail
|
|
|
|
git config --global user.email "github-action@etcd.io"
|
|
git config --global user.name "Github Action"
|
|
gpg --batch --gen-key <<EOF
|
|
%no-protection
|
|
Key-Type: 1
|
|
Key-Length: 2048
|
|
Subkey-Type: 1
|
|
Subkey-Length: 2048
|
|
Name-Real: Github Action
|
|
Name-Email: github-action@etcd.io
|
|
Expire-Date: 0
|
|
EOF
|
|
DRY_RUN=true ./scripts/release.sh --no-upload --no-docker-push --in-place 3.6.99
|
|
- name: test-image
|
|
run: |
|
|
VERSION=3.6.99 ./scripts/test_images.sh
|
|
- name: save-image
|
|
run: |
|
|
docker image save -o /tmp/etcd-img.tar gcr.io/etcd-development/etcd
|
|
- name: upload-image
|
|
uses: actions/upload-artifact@50769540e7f4bd5e21e526ee35c689e35e0d6874 # v4.4.0
|
|
with:
|
|
name: etcd-img
|
|
path: /tmp/etcd-img.tar
|
|
retention-days: 1
|
|
trivy-scan:
|
|
needs: main
|
|
strategy:
|
|
fail-fast: false
|
|
matrix:
|
|
platforms: [amd64, arm64, ppc64le, s390x]
|
|
permissions:
|
|
security-events: write # for github/codeql-action/upload-sarif to upload SARIF results
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: get-image
|
|
uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
|
|
with:
|
|
name: etcd-img
|
|
path: /tmp
|
|
- name: load-image
|
|
run: |
|
|
docker load < /tmp/etcd-img.tar
|
|
- name: trivy-scan
|
|
uses: aquasecurity/trivy-action@6e7b7d1fd3e4fef0c5fa8cce1229c54b2c9bd0d8 # v0.24.0
|
|
with:
|
|
image-ref: 'gcr.io/etcd-development/etcd:v3.6.99-${{ matrix.platforms }}'
|
|
severity: 'CRITICAL,HIGH'
|
|
format: 'sarif'
|
|
output: 'trivy-results-${{ matrix.platforms }}.sarif'
|
|
- name: upload scan results
|
|
uses: github/codeql-action/upload-sarif@4dd16135b69a43b6c8efb853346f8437d92d3c93 # v3.26.6
|
|
with:
|
|
sarif_file: 'trivy-results-${{ matrix.platforms }}.sarif'
|