Merge branch 'dev' of https://github.com/PromptSail/prompt_sail into dev #395

Workflow file for this run

.github/workflows/docker-publish.yml at 26b2a71

	name: Build and Publish Docker to ghcr

	# This workflow uses actions that are not certified by GitHub.
	# They are provided by a third-party and are governed by
	# separate terms of service, privacy policy, and support
	# documentation.

	on:
	push:
	branches:
	- dev
	- main
	# Publish semver tags as releases.
	#tags: [ 'v..*' ]
	release:
	types: [created]

	env:
	# Use docker.io for Docker Hub if empty
	REGISTRY: ghcr.io
	# github.repository as <account>/<repo>
	IMAGE_NAME: ${{ github.repository }}
	IMAGE_NAME_BACKEND: promptsail-backend
	IMAGE_NAME_UI: promptsail-ui
	IMAGE_URI: ghcr.io/promptsail

	jobs:

	run-test-backend:

	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write
	# This is used to complete the identity challenge
	# with sigstore/fulcio when running outside of PRs.
	id-token: write

	services:
	mongodb:
	image: mongo:latest
	env:
	MONGO_INITDB_ROOT_USERNAME: root
	MONGO_INITDB_ROOT_PASSWORD: password
	ports:
	- 27017:27017

	steps:

	- name: set datetime env
	run: echo "NOW=$(date +'%Y.%m.%d.%H%M%S')" >> $GITHUB_ENV

	- name: Checkout repository
	uses: actions/checkout@v3

	- name: Set up Python
	uses: actions/setup-python@v3
	with:
	python-version: "3.10"

	- name: Install Poetry
	run: \|
	curl -sSL https://install.python-poetry.org \| python3 - --version 1.7.1

	- name: Configure Poetry
	run: \|
	cd backend
	poetry config virtualenvs.create true
	poetry config virtualenvs.in-project true

	- name: Install backend dependencies
	run: cd backend && poetry install

	- name: Run tests
	run: \|
	cd backend
	poetry run bash -c "cd .. && MONGO_URL=mongodb://root:password@localhost:27017 make test"


	build-publish-backend-image:
	needs: run-test-backend

	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write
	# This is used to complete the identity challenge
	# with sigstore/fulcio when running outside of PRs.
	id-token: write

	steps:
	- name: set datetime env
	run: echo "NOW=$(date +'%Y.%m.%d')" >> $GITHUB_ENV

	- name: Set RELEASE_TAG based on branch name and release tag
	run: \|
	if [[ "${{ github.ref }}" == "refs/heads/main" ]]; then
	echo "RELEASE_TAG=release-candidate" >> $GITHUB_ENV
	elif [[ "${{ github.event.release.tag_name }}" != "" ]]; then
	echo "RELEASE_TAG=latest" >> $GITHUB_ENV
	else
	echo "RELEASE_TAG=dev-release" >> $GITHUB_ENV
	fi

	- name: Use RELEASE_TAG
	run: echo "RELEASE_TAG is ${{ env.RELEASE_TAG }}"

	- name: Checkout repository
	uses: actions/checkout@v4


	# Install the cosign tool except on PR
	# https://github.com/sigstore/cosign-installer
	- name: Install cosign
	if: github.event_name != 'pull_request'
	uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
	with:
	cosign-release: 'v2.1.1'

	# Set up QEMU for cross-platform builds -> https://docs.docker.com/build/ci/github-actions/multi-platform/
	- name: Set up QEMU
	uses: docker/setup-qemu-action@v3

	# Set up BuildKit Docker container builder to be able to build
	# multi-platform images and export cache
	# https://github.com/docker/setup-buildx-action
	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	# Login against a Docker registry except on PR
	# https://github.com/docker/login-action
	- name: Log into registry ${{ env.REGISTRY }}
	if: github.event_name != 'pull_request'
	uses: docker/login-action@v3
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	# Extract metadata (tags, labels) for Docker
	# https://github.com/docker/metadata-action
	- name: Extract Docker metadata
	id: meta
	uses: docker/metadata-action@v5 # v5.0.0
	with:
	images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
	#images: ${{ env.IMAGE_URI }}/${{ env.IMAGE_NAME_BACKEND }}


	# Build and push Docker image with Buildx (don't push on PR)
	# https://github.com/docker/build-push-action
	# previous tags
	#${{ env.IMAGE_URI }}/${{ env.IMAGE_NAME_BACKEND }}:${{ github.sha }}
	#${{ env.IMAGE_URI }}/${{ env.IMAGE_NAME_BACKEND }}:${{ github.run_number }}
	- name: Build and push Docker image
	id: build-and-push
	uses: docker/build-push-action@v5 # v5.0.0
	with:
	platforms: linux/amd64,linux/arm64/v8
	context: ./backend
	file: ./backend/Dockerfile
	push: true
	tags: \|
	${{ env.IMAGE_URI }}/${{ env.IMAGE_NAME_BACKEND }}:${{ github.event.release.tag_name \|\| env.RELEASE_TAG }}
	${{ env.IMAGE_URI }}/${{ env.IMAGE_NAME_BACKEND }}:${{ env.RELEASE_TAG }}
	labels: ${{ steps.meta.outputs.labels }}
	cache-from: type=gha
	cache-to: type=gha,mode=max

	# Sign the resulting Docker image digest except on PRs.
	# This will only write to the public Rekor transparency log when the Docker
	# repository is public to avoid leaking data. If you would like to publish
	# transparency data even for private images, pass --force to cosign below.
	# https://github.com/sigstore/cosign
	- name: Sign the published Docker image
	if: ${{ github.event_name != 'pull_request' }}
	env:
	# https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
	TAGS: ${{ steps.build-and-push.outputs.tags }} # Use tags from build-and-push step
	DIGEST: ${{ steps.build-and-push.outputs.digest }}
	# This step uses the identity token to provision an ephemeral certificate
	# against the sigstore community Fulcio instance.
	run: echo "${TAGS}" \| xargs -I {} cosign sign --yes {}@${DIGEST}



	build-publish-ui-image:

	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write
	# This is used to complete the identity challenge
	# with sigstore/fulcio when running outside of PRs.
	id-token: write

	steps:

	- name: set datetime env
	run: echo "NOW=$(date +'%Y.%m.%d')" >> $GITHUB_ENV

	- name: Set RELEASE_TAG based on branch name and release tag
	run: \|
	if [[ "${{ github.ref }}" == "refs/heads/main" ]]; then
	echo "RELEASE_TAG=release-candidate" >> $GITHUB_ENV
	elif [[ "${{ github.event.release.tag_name }}" != "" ]]; then
	echo "RELEASE_TAG=latest" >> $GITHUB_ENV
	else
	echo "RELEASE_TAG=dev-release" >> $GITHUB_ENV
	fi

	- name: Use RELEASE_TAG
	run: echo "RELEASE_TAG is ${{ env.RELEASE_TAG }}"
	- name: Checkout repository
	uses: actions/checkout@v4


	# Install the cosign tool except on PR
	# https://github.com/sigstore/cosign-installer
	- name: Install cosign
	if: github.event_name != 'pull_request'
	uses: sigstore/cosign-installer@6e04d228eb30da1757ee4e1dd75a0ec73a653e06 #v3.1.1
	with:
	cosign-release: 'v2.1.1'

	# Set up QEMU for cross-platform builds -> https://docs.docker.com/build/ci/github-actions/multi-platform/
	- name: Set up QEMU
	uses: docker/setup-qemu-action@v3

	# Set up BuildKit Docker container builder to be able to build
	# multi-platform images and export cache
	# https://github.com/docker/setup-buildx-action
	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3 # v3.0.0

	# Login against a Docker registry except on PR
	# https://github.com/docker/login-action
	- name: Log into registry ${{ env.REGISTRY }}
	if: github.event_name != 'pull_request'
	uses: docker/login-action@v3 # v3.0.0
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	# Extract metadata (tags, labels) for Docker
	# https://github.com/docker/metadata-action
	- name: Extract Docker metadata
	id: meta
	uses: docker/metadata-action@v5 # v5.0.0
	with:
	#images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
	images: ${{ env.IMAGE_URI }}/${{ env.IMAGE_NAME_UI }}
	# Build and push Docker image with Buildx (don't push on PR)
	# https://github.com/docker/build-push-action
	# ${{ env.IMAGE_URI }}/${{ env.IMAGE_NAME_UI }}:${{ github.sha }}
	# ${{ env.IMAGE_URI }}/${{ env.IMAGE_NAME_UI }}:${{ github.run_number }}
	- name: Build and push Docker image
	id: build-and-push
	uses: docker/build-push-action@v5 # v5.0.0
	with:
	platforms: linux/amd64,linux/arm64/v8
	context: ./ui
	file: ./ui/Dockerfile
	push: true
	tags: \|
	${{ env.IMAGE_URI }}/${{ env.IMAGE_NAME_UI }}:${{ github.event.release.tag_name \|\| env.RELEASE_TAG }}
	${{ env.IMAGE_URI }}/${{ env.IMAGE_NAME_UI }}:${{ env.RELEASE_TAG }}
	labels: ${{ steps.meta.outputs.labels }}
	cache-from: type=gha
	cache-to: type=gha,mode=max


	# Sign the resulting Docker image digest except on PRs.
	# This will only write to the public Rekor transparency log when the Docker
	# repository is public to avoid leaking data. If you would like to publish
	# transparency data even for private images, pass --force to cosign below.
	# https://github.com/sigstore/cosign
	- name: Sign the published Docker image
	if: ${{ github.event_name != 'pull_request' }}
	env:
	# https://docs.github.com/en/actions/security-guides/security-hardening-for-github-actions#using-an-intermediate-environment-variable
	TAGS: ${{ steps.build-and-push.outputs.tags }} # Use tags from build-and-push step
	DIGEST: ${{ steps.build-and-push.outputs.digest }}
	# This step uses the identity token to provision an ephemeral certificate
	# against the sigstore community Fulcio instance.
	run: echo "${TAGS}" \| xargs -I {} cosign sign --yes {}@${DIGEST}

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Merge branch 'dev' of https://github.com/PromptSail/prompt_sail into dev #395

Workflow file

Merge branch 'dev' of https://github.com/PromptSail/prompt_sail into dev #395

Jobs

Run details

Workflow file for this run