generated from meshery/meshery-istio
-
Notifications
You must be signed in to change notification settings - Fork 24
140 lines (139 loc) · 4.95 KB
/
ci.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
name: Meshery-NSX-SM
on:
push:
branches:
- '*'
tags:
- 'v*'
pull_request:
branches:
- master
jobs:
lint:
name: Check & Review code
runs-on: ubuntu-latest
steps:
- name: Check out code
uses: actions/checkout@master
with:
fetch-depth: 1
- name: Setup Go
uses: actions/setup-go@v1
with:
go-version: ${{ secrets.GO_VERSION }}
- run: GOPROXY=direct GOSUMDB=off go get -u golang.org/x/lint/golint; go list ./... | grep -v /vendor/ | xargs -L1 /home/runner/go/bin/golint -set_exit_status
# error_check:
# name: Error check
# runs-on: ubuntu-latest
# steps:
# - name: Check out code
# uses: actions/checkout@master
# with:
# fetch-depth: 1
# - name: Setup Go
# uses: actions/setup-go@v1
# with:
# go-version: ${{ secrets.GO_VERSION }}
# - run: GOPROXY=direct GOSUMDB=off GO111MODULE=on go get -u github.com/kisielk/errcheck; /home/runner/go/bin/errcheck ./...
# static_check:
# name: Static check
# runs-on: ubuntu-latest
# steps:
# - name: Check out code
# uses: actions/checkout@master
# with:
# fetch-depth: 1
# - name: Setup Go
# uses: actions/setup-go@v1
# with:
# go-version: ${{ secrets.GO_VERSION }}
# - run: GOPROXY=direct GOSUMDB=off GO111MODULE=on go get -u honnef.co/go/tools/cmd/staticcheck; /home/runner/go/bin/staticcheck -checks all ./... # https://staticcheck.io/docs/checks
# vet:
# name: Vet
# runs-on: ubuntu-latest
# steps:
# - name: Check out code
# uses: actions/checkout@master
# with:
# fetch-depth: 1
# - name: Setup Go
# uses: actions/setup-go@v1
# with:
# go-version: ${{ secrets.GO_VERSION }}
# - run: GOPROXY=direct GOSUMDB=off GO111MODULE=on go vet ./...
# sec_check:
# name: Security check
# runs-on: ubuntu-latest
# steps:
# - name: Check out code
# uses: actions/checkout@master
# with:
# fetch-depth: 1
# - name: Setup Go
# uses: actions/setup-go@v1
# with:
# go-version: ${{ secrets.GO_VERSION }}
# - run: GOPROXY=direct GOSUMDB=off GO111MODULE=on go get github.com/securego/gosec/cmd/gosec; /home/runner/go/bin/gosec ./... # https://github.com/securego/gosec
# tests:
# # needs: [lint, error_check, static_check, vet, sec_check]
# name: Tests
# runs-on: ubuntu-latest
# steps:
# - name: Check out code
# uses: actions/checkout@master
# with:
# fetch-depth: 1
# - name: Setup Go
# uses: actions/setup-go@v1
# with:
# go-version: ${{ secrets.GO_VERSION }}
# - run: GOPROXY=direct GOSUMDB=off GO111MODULE=on go test ./...
build:
name: Build check
runs-on: ubuntu-latest
# needs: [lint, error_check, static_check, vet, sec_check, tests]
steps:
- name: Check out code
uses: actions/checkout@master
with:
fetch-depth: 1
- name: Setup Go
uses: actions/setup-go@v1
with:
go-version: ${{ secrets.GO_VERSION }}
- run: GOPROXY=direct GOSUMDB=off GO111MODULE=on go get -u github.com/kisielk/errcheck; /home/runner/go/bin/errcheck -tags draft ./...
docker:
name: Docker build and push
runs-on: ubuntu-latest
# needs: [build, build_release]
steps:
- name: Check out code
if: github.event_name != 'pull_request' && startsWith(github.ref, 'refs/tags/') && success()
uses: actions/checkout@master
with:
fetch-depth: 1
- name: Docker login
if: github.event_name != 'pull_request' && startsWith(github.ref, 'refs/tags/') && success()
uses: azure/container-actions/docker-login@master
with:
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}
- name: Docker build & tag
if: github.event_name != 'pull_request' && startsWith(github.ref, 'refs/tags/') && success()
run: |
DOCKER_BUILDKIT=1 docker build --no-cache -t ${{ secrets.IMAGE_NAME }}:stable-latest .
docker tag ${{ secrets.IMAGE_NAME }}:stable-latest ${{ secrets.IMAGE_NAME }}:stable-${GITHUB_REF/refs\/tags\//}
docker tag ${{ secrets.IMAGE_NAME }}:stable-latest ${{ secrets.IMAGE_NAME }}:stable-${GITHUB_SHA::7}
- name: Docker push
if: github.event_name != 'pull_request' && startsWith(github.ref, 'refs/tags/') && success()
run: |
docker push ${{ secrets.IMAGE_NAME }}:stable-latest
docker push ${{ secrets.IMAGE_NAME }}:stable-${GITHUB_REF/refs\/tags\//}
docker push ${{ secrets.IMAGE_NAME }}:stable-${GITHUB_SHA::7}
- name: Docker Hub Description
if: github.event_name != 'pull_request' && startsWith(github.ref, 'refs/tags/') && success()
uses: peter-evans/dockerhub-description@v2.0.0
env:
DOCKERHUB_USERNAME: ${{ secrets.DOCKER_USERNAME }}
DOCKERHUB_PASSWORD: ${{ secrets.DOCKER_PASSWORD }}
DOCKERHUB_REPOSITORY: ${{ secrets.IMAGE_NAME }}