Nightly Release #3
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Nightly Release | |
| on: | |
| workflow_dispatch: # Manual trigger | |
| schedule: | |
| - cron: '0 5 * * *' # 5 AM UTC = Midnight EST | |
| jobs: | |
| nightly: | |
| if: ${{ github.repository == 'shipwright-io/build' }} | |
| runs-on: ubuntu-latest | |
| permissions: | |
| id-token: write # To be able to get OIDC ID token to sign images. | |
| contents: write # To be able to update releases. | |
| packages: write # To be able to push images and signatures. | |
| env: | |
| IMAGE_HOST: ghcr.io | |
| IMAGE_NAMESPACE: ${{ github.repository }} | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - uses: actions/setup-go@v5 | |
| with: | |
| go-version: '1.22.x' | |
| cache: true | |
| check-latest: true | |
| # Install tools | |
| - uses: ko-build/[email protected] | |
| with: | |
| version: v0.17.1 | |
| - uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e | |
| - uses: sigstore/cosign-installer@v3 | |
| - name: Get current date | |
| id: date | |
| run: echo "date=$(date +'%Y-%m-%d-%s')" >> $GITHUB_OUTPUT | |
| - name: Generate and upload release YAMLs | |
| env: | |
| REGISTRY_PASSWORD: ${{ secrets.GITHUB_TOKEN }} | |
| REGISTRY_USERNAME: ${{ github.repository_owner }} | |
| TAG: "nightly-${{ steps.date.outputs.date }}" | |
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} | |
| run: | | |
| make release | |
| mv release.yaml nightly-${{ steps.date.outputs.date }}.yaml | |
| gh release upload nightly nightly-${{ steps.date.outputs.date }}.yaml | |
| mv release-debug.yaml nightly-${{ steps.date.outputs.date }}-debug.yaml | |
| gh release upload nightly nightly-${{ steps.date.outputs.date }}-debug.yaml | |
| mv sample-strategies.yaml nightly-${{ steps.date.outputs.date }}-sample-strategies.yaml | |
| gh release upload nightly nightly-${{ steps.date.outputs.date }}-sample-strategies.yaml | |
| echo ${{ steps.date.outputs.date }} > /tmp/latest.txt | |
| gh release upload nightly /tmp/latest.txt --clobber | |
| - name: Update latest tag of supporting images | |
| working-directory: ./cmd | |
| run: | | |
| for command in * | |
| do | |
| crane copy "${IMAGE_HOST}/${IMAGE_NAMESPACE}/${command}:nightly-${{ steps.date.outputs.date }}" "${IMAGE_HOST}/${IMAGE_NAMESPACE}/${command}:latest" | |
| done | |
| - name: Sign released images | |
| run: | | |
| for f in \ | |
| nightly-${{ steps.date.outputs.date }}.yaml \ | |
| nightly-${{ steps.date.outputs.date }}-debug.yaml; do | |
| grep -o "ghcr.io[^\"]*" $f | xargs cosign sign --yes \ | |
| -a sha=${{ github.sha }} \ | |
| -a run_id=${{ github.run_id }} \ | |
| -a run_attempt=${{ github.run_attempt }} | |
| done |