build-push-cft-devtools.yml

name: Build and push new dev tools image
on:
  push:
    branches:
      - "master"
    paths:
      - "infra/build/**"
      - ".github/workflows/build-push-cft-devtools.yml"
env:
  PROJECT_ID: ${{ secrets.GCR_PROJECT_ID }}

jobs:
  build-push-dev-tools:
    name: Build and push new CFT dev tools image
    runs-on: ubuntu-latest
    if: github.repository == 'GoogleCloudPlatform/cloud-foundation-toolkit'

    permissions:
      contents: 'read'
      id-token: 'write'

    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1

      - id: 'auth'
        name: 'Authenticate to Google Cloud'
        uses: 'google-github-actions/auth@f6de81663f7788d05bd15bcce18f0e57f23f0846' # v2.0.1
        with:
          workload_identity_provider: '${{ secrets.GCP_WIF_PROVIDER }}'
          service_account: '${{ secrets.GCP_WIF_SA_EMAIL }}'

      - uses: google-github-actions/setup-gcloud@5a5f7b85fca43e76e53463acaa9d408a03c98d3a # v2.0.1
        with:
          project_id: ${{ env.PROJECT_ID }}

      - name: Build
        run: |-
          gcloud auth configure-docker -q
          cd infra/build && make build-image-developer-tools

      - name: Push
        run: |-
          cd infra/build && make release-image-developer-tools

      - name: Open issue if failed
        if: ${{ failure() }}
        uses: actions/github-script@60a0d83039c74a4aee543508d2ffcb1c3799cdea # v7.0.1
        with:
          script: |-
              github.rest.issues.create({
                  owner: context.repo.owner,
                  repo: context.repo.repo,
                  title: 'build-push-dev-tools job failed',
                  body: 'Logs: https://github.com/${{ github.repository }}/actions/runs/${{ github.run_id }}',
                  assignees: ['bharathkkb','apeabody']
                })