mirror of
https://github.com/coder/coder.git
synced 2026-09-24 15:04:27 +08:00
Bumps the github-actions group with 4 updates: [crate-ci/typos](https://github.com/crate-ci/typos), [actions/github-script](https://github.com/actions/github-script), [DeterminateSystems/nix-installer-action](https://github.com/determinatesystems/nix-installer-action) and [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action). Updates `crate-ci/typos` from 1.16.22 to 1.16.23 - [Release notes](https://github.com/crate-ci/typos/releases) - [Changelog](https://github.com/crate-ci/typos/blob/master/CHANGELOG.md) - [Commits](https://github.com/crate-ci/typos/compare/v1.16.22...v1.16.23) Updates `actions/github-script` from 5 to 6 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](https://github.com/actions/github-script/compare/v5...v6) Updates `DeterminateSystems/nix-installer-action` from 6 to 7 - [Release notes](https://github.com/determinatesystems/nix-installer-action/releases) - [Commits](https://github.com/determinatesystems/nix-installer-action/compare/v6...v7) Updates `aquasecurity/trivy-action` from 0.13.1 to 0.14.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/f78e9ecf42a1271402d4f484518b9313235990e1...2b6a709cf9c4025c5438138008beaddbb02086f0) --- updated-dependencies: - dependency-name: crate-ci/typos dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: actions/github-script dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: DeterminateSystems/nix-installer-action dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
91 lines
2.7 KiB
YAML
91 lines
2.7 KiB
YAML
name: dogfood
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
paths:
|
|
- "flake.nix"
|
|
- "flake.lock"
|
|
- "dogfood/**"
|
|
- ".github/workflows/dogfood.yaml"
|
|
# Uncomment these lines when testing with CI.
|
|
# pull_request:
|
|
# paths:
|
|
# - "flake.nix"
|
|
# - "flake.lock"
|
|
# - "dogfood/**"
|
|
# - ".github/workflows/dogfood.yaml"
|
|
workflow_dispatch:
|
|
|
|
jobs:
|
|
deploy_image:
|
|
runs-on: buildjet-4vcpu-ubuntu-2204
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Get branch name
|
|
id: branch-name
|
|
uses: tj-actions/branch-names@v6.5
|
|
|
|
- name: "Branch name to Docker tag name"
|
|
id: docker-tag-name
|
|
run: |
|
|
tag=${{ steps.branch-name.outputs.current_branch }}
|
|
# Replace / with --, e.g. user/feature => user--feature.
|
|
tag=${tag//\//--}
|
|
echo "tag=${tag}" >> $GITHUB_OUTPUT
|
|
|
|
- name: Install Nix
|
|
uses: DeterminateSystems/nix-installer-action@v7
|
|
|
|
- name: Run the Magic Nix Cache
|
|
uses: DeterminateSystems/magic-nix-cache-action@v2
|
|
|
|
- run: nix build .#devEnvImage && ./result | docker load
|
|
|
|
- name: Login to DockerHub
|
|
uses: docker/login-action@v3
|
|
with:
|
|
username: ${{ secrets.DOCKERHUB_USERNAME }}
|
|
password: ${{ secrets.DOCKERHUB_PASSWORD }}
|
|
|
|
- name: Tag and Push
|
|
run: |
|
|
docker tag codercom/oss-dogfood:latest codercom/oss-dogfood:${{ steps.docker-tag-name.outputs.tag }}
|
|
docker push codercom/oss-dogfood -a
|
|
|
|
deploy_template:
|
|
needs: deploy_image
|
|
runs-on: ubuntu-latest
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Get short commit SHA
|
|
id: vars
|
|
run: echo "sha_short=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
|
|
|
|
- name: Get latest commit title
|
|
id: message
|
|
run: echo "pr_title=$(git log --format=%s -n 1 ${{ github.sha }})" >> $GITHUB_OUTPUT
|
|
|
|
- name: "Get latest Coder binary from the server"
|
|
run: |
|
|
curl -fsSL "https://dev.coder.com/bin/coder-linux-amd64" -o "./coder"
|
|
chmod +x "./coder"
|
|
|
|
- name: "Push template"
|
|
run: |
|
|
./coder templates push $CODER_TEMPLATE_NAME --directory $CODER_TEMPLATE_DIR --yes --name=$CODER_TEMPLATE_VERSION --message="$CODER_TEMPLATE_MESSAGE"
|
|
env:
|
|
# Consumed by Coder CLI
|
|
CODER_URL: https://dev.coder.com
|
|
CODER_SESSION_TOKEN: ${{ secrets.CODER_SESSION_TOKEN }}
|
|
# Template source & details
|
|
CODER_TEMPLATE_NAME: ${{ secrets.CODER_TEMPLATE_NAME }}
|
|
CODER_TEMPLATE_VERSION: ${{ steps.vars.outputs.sha_short }}
|
|
CODER_TEMPLATE_DIR: ./dogfood
|
|
CODER_TEMPLATE_MESSAGE: ${{ steps.message.outputs.pr_title }}
|