The pinned action versions had drifted apart between the container image repositories, which made it hard to tell whether a workflow failure was caused by a local change or by an outdated action. All actions are now pinned to the commit sha of their latest upstream release, so every repository runs the same toolchain.
70 lines
2.1 KiB
YAML
70 lines
2.1 KiB
YAML
name: Build
|
|
|
|
on:
|
|
pull_request:
|
|
types:
|
|
- opened
|
|
- reopened
|
|
- synchronize
|
|
push:
|
|
branches:
|
|
- master
|
|
workflow_dispatch: {}
|
|
|
|
jobs:
|
|
build-arm64:
|
|
runs-on: ubuntu-latest-arm64
|
|
steps:
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
|
|
- uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
|
|
with:
|
|
registry: harbor.cryptic.systems
|
|
username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
|
|
password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
|
|
|
|
- uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
|
|
with:
|
|
image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
|
|
|
|
- uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
|
|
|
|
- name: Build image
|
|
run: |
|
|
TAG=latest
|
|
|
|
docker buildx build \
|
|
--platform linux/arm64 \
|
|
--file Dockerfile \
|
|
--provenance false \
|
|
--tag git.cryptic.systems/volker.raschek/markdownlint:${TAG}-arm64 \
|
|
.
|
|
|
|
build-amd64:
|
|
runs-on: ubuntu-latest-amd64
|
|
steps:
|
|
- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
|
|
- uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
|
|
with:
|
|
registry: harbor.cryptic.systems
|
|
username: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_USERNAME }}
|
|
password: ${{ secrets.HARBOR_CRYPTIC_SYSTEMS_PASSWORD }}
|
|
|
|
- uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
|
|
with:
|
|
image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
|
|
|
|
- uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
|
|
|
|
- name: Build image
|
|
run: |
|
|
TAG=latest
|
|
|
|
docker buildx build \
|
|
--platform linux/amd64 \
|
|
--file Dockerfile \
|
|
--provenance false \
|
|
--tag git.cryptic.systems/volker.raschek/markdownlint:${TAG}-amd64 \
|
|
.
|