Matthew Baggett
6db6395f66
* linting is fun * mis-detection of missing healthcheck staements. * typo * disable tagging vanity tags on non-main branch * Unbugger node build? * Add gitleaks detector, remove an expired secret. * More linting-derived cleanup * Fiddle with trivy * Fiddle with trivy * add a readme * Fix build bug with php flavours * Marshall should build other flavours of ubuntu. * Fiddle with act cache location. * Add concurrency checks * Composer version gubbins for 7.0/7.1 * ubuntu is just a label, and injected over the top of. * Composer version gubbins for 7.0/7.1 * Run when workflow is altered too please. * Hopefully fix composer stage. * setup tooling meta-tooling. * Add trunk * Disable mirror mode, its being problematic, and increase retries to 5. * Revisit how ghcr login works. * Add trunk checks. * All hail the linter * Heavilly revise workflow * Fettling * Fettling * Fettling * Fettling * Fettling * Cleanup * Cleanup * Fettling.. Why does mitm build but not redis? * Fettling.. Why does mitm build but not redis? * Debuggin * Fettling. * Fix build? * Permissions are a pain * Switch around some should_push logic because envs aren't available that early. * Permissionssssss * Trivy, bane of my life * Fix merge? * Fix labels * Help node along, among other things * Redis 6.1 & 7.1 aren't a thing any more. * Ffff USER nonsense * latest-openssl doesn't exist. * fixup mysqlproxy. * Fix labels * uurrgh * uurrgh * Didn't need to add the mitmproxy user, it exists * Missing ghcr login * Missing backtick * Fix build? * Add validate build step to bouncer. * Fix bouncer build * Disable laravel build * Missing env * Fix swarm mon build * Scout just doesn't seem to work.
121 lines
2.3 KiB
YAML
121 lines
2.3 KiB
YAML
name: Build
|
|
|
|
on:
|
|
pull_request:
|
|
types: [opened, reopened, synchronize]
|
|
push:
|
|
branches:
|
|
- main
|
|
workflow_dispatch:
|
|
|
|
concurrency:
|
|
group: build-${{ github.head_ref || github.run_id }}
|
|
cancel-in-progress: true
|
|
|
|
permissions: read-all
|
|
|
|
jobs:
|
|
qc-before:
|
|
name: QC Trunk
|
|
uses: ./.github/workflows/trunk.check.yml
|
|
secrets: inherit
|
|
permissions: write-all
|
|
|
|
marshall:
|
|
needs: qc-before
|
|
name: Marshall
|
|
uses: ./.github/workflows/marshall.yml
|
|
secrets: inherit
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
php:
|
|
needs: marshall
|
|
name: PHP Core
|
|
uses: ./.github/workflows/php.yml
|
|
secrets: inherit
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
#laravel:
|
|
# needs: php
|
|
# name: PHP Vanity Tags
|
|
# uses: ./.github/workflows/laravel.yml
|
|
# secrets: inherit
|
|
# permissions:
|
|
# contents: read
|
|
# packages: write
|
|
|
|
bouncer:
|
|
needs: php
|
|
name: Nginx Load Balancer (Bouncer)
|
|
uses: ./.github/workflows/bouncer.yml
|
|
secrets: inherit
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
mitm-proxy:
|
|
needs: qc-before
|
|
name: Man-in-the-middle proxy w/Healthchecks
|
|
uses: ./.github/workflows/mitm-proxy.yml
|
|
secrets: inherit
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
mqtt:
|
|
needs: qc-before
|
|
name: MQTT w/Healthchecks
|
|
uses: ./.github/workflows/mqtt.yml
|
|
secrets: inherit
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
mysql-proxy:
|
|
needs: qc-before
|
|
name: MySQL Proxy
|
|
uses: ./.github/workflows/mysql-proxy.yml
|
|
secrets: inherit
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
#node:
|
|
# needs: marshall
|
|
# name: Node
|
|
# uses: ./.github/workflows/node.yml
|
|
# secrets: inherit
|
|
# permissions:
|
|
# contents: read
|
|
# packages: write
|
|
|
|
redis:
|
|
needs: qc-before
|
|
name: Redis w/Healthchecks
|
|
uses: ./.github/workflows/redis.yml
|
|
secrets: inherit
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
swarm-monitor:
|
|
needs: php
|
|
name: Swarm Monitor
|
|
uses: ./.github/workflows/swarm-monitor.yml
|
|
secrets: inherit
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
|
|
wordpress:
|
|
needs: php
|
|
name: Wordpress
|
|
uses: ./.github/workflows/wordpress.yml
|
|
secrets: inherit
|
|
permissions:
|
|
contents: read
|
|
packages: write
|