Test, build and push #7541

Workflow file for this run

.github/workflows/workflow.yml at e49812a

	name: Test, build and push

	on:
	push:
	# Always run on main so that the cached dependencies are up to date
	# PRs can access caches created by the default branch, but if we do
	# not create the cache on the default branch, PRs would allways create
	# a new one, which defeats the purpose.
	branches:
	- main
	tags:
	- '*'
	pull_request:

	# Enables us to manually trigger the CI for earlier tags
	workflow_dispatch:

	# Enable merge queue
	merge_group:

	concurrency:
	group: ${{ github.ref }}
	cancel-in-progress: true

	env:
	REGISTRY: ghcr.io
	IMAGE_NAME: ${{ github.repository }}

	jobs:
	pre-commit:
	runs-on: ubuntu-latest
	permissions:
	packages: read

	steps:
	- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Get node version
	id: version
	run: echo "version=$(cat .node-version)" >> $GITHUB_OUTPUT

	- name: Setup node & cache dependencies
	uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
	with:
	node-version: ${{ steps.version.outputs.version }}
	cache: 'npm'

	- name: install node modules
	run: npm ci

	- uses: pre-commit/action@2c7b3805fd2a0fd8c1884dcaebf91fc102a13ecd # v3.0.1

	cypress:
	runs-on: ubuntu-latest
	permissions:
	packages: read

	# Current backend version as service container
	services:
	backend:
	image: ghcr.io/envelope-zero/backend:v7.0.1
	env:
	CORS_ALLOW_ORIGINS: http://localhost:3000
	API_URL: http://localhost:3000/api
	ports:
	- 8080:8080
	options: --user root

	strategy:
	fail-fast: false # https://github.com/cypress-io/github-action/issues/48
	matrix:
	containers: [1, 2, 3, 4, 5, 6] # Use 6 parallel instances as per Cypress Cloud recommendation
	steps:
	- name: Checkout
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Get node version
	id: version
	run: echo "version=$(cat .node-version)" >> $GITHUB_OUTPUT

	- name: Setup node & cache dependencies
	uses: actions/setup-node@cdca7365b2dadb8aad0a33bc7601856ffabcc48e # v4.3.0
	with:
	node-version: ${{ steps.version.outputs.version }}
	cache: 'npm'

	- name: Run cypress
	uses: cypress-io/github-action@108b8684ae52e735ff7891524cbffbcd4be5b19f # v6.7.16
	timeout-minutes: 5
	with:
	start: npm run start-ci
	# Frontend runs on :3000, API on :8080
	wait-on: 'http://localhost:3000, http://localhost:8080'

	# Records to Cypress Cloud
	record: true
	parallel: true

	env:
	CYPRESS_RECORD_KEY: ${{ secrets.CYPRESS_RECORD_KEY }}
	GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

	# This job generates the matrix depending on the branch.
	# See .github/matrix.json
	#
	# Allowed values for "runOn" are
	# - a branch name
	# - "always" to run in any case
	# - "tag" to run when the reference is a tag
	matrix:
	runs-on: ubuntu-latest
	outputs:
	matrix: ${{ steps.set-matrix.outputs.matrix }}
	steps:
	- name: Checkout repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- id: set-matrix
	run: \|
	branchName=$(echo '${{ github.ref }}' \| sed 's,refs/heads/,,g')
	matrix=$(jq --arg branchName "$branchName" 'map(
	. \| select((.runOn==$branchName) or (.runOn=="always") or (.runOn=="tag" and ($branchName \| startswith("refs/tags"))))
	)' .github/matrix.json)
	echo "matrix={\"include\":$(echo $matrix)}" >> $GITHUB_OUTPUT

	build:
	needs:
	- matrix

	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write

	strategy:
	fail-fast: false
	matrix: ${{ fromJson(needs.matrix.outputs.matrix) }}

	steps:
	- name: Checkout repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Prepare
	run: \|
	platform=${{ matrix.platform }}
	echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV

	- name: Set up QEMU
	uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0

	- name: Log in to the Container registry
	uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Extract metadata (tags, labels) for Docker
	id: meta
	uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
	with:
	images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}

	- name: Build and push by digest
	id: build
	uses: docker/build-push-action@471d1dc4e07e5cdedd4c2171150001c434f0b7a4 # v6.15.0
	with:
	platforms: ${{ matrix.platform }}
	labels: ${{ steps.meta.outputs.labels }}
	outputs: type=image,name=${{ env.REGISTRY }}/${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true,push=${{ github.repository_owner == 'envelope-zero' && (contains(github.ref, 'refs/tags/') \|\| contains(github.event.pull_request.labels.*.name, 'push-image')) }}
	build-args: \|
	VITE_VERSION=${{ github.ref_name }}

	- name: Export digest
	run: \|
	mkdir -p /tmp/digests
	digest="${{ steps.build.outputs.digest }}"
	touch "/tmp/digests/${digest#sha256:}"

	- name: Upload digest
	uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
	with:
	name: digests-${{ env.PLATFORM_PAIR }}
	path: /tmp/digests/*
	if-no-files-found: error
	retention-days: 1

	merge:
	if: github.repository_owner == 'envelope-zero' && (contains(github.ref, 'refs/tags/') \|\| contains(github.event.pull_request.labels.*.name, 'push-image'))
	runs-on: ubuntu-latest
	needs:
	- build
	steps:
	- name: Download digests
	uses: actions/download-artifact@95815c38cf2ff2164869cbab79da8d1f422bc89e # v4.2.1
	with:
	path: /tmp/digests
	pattern: digests-*
	merge-multiple: true

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0

	- name: Extract metadata (tags, labels) for Docker
	id: meta
	uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
	with:
	images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
	tags: \|
	type=ref,event=branch
	type=ref,event=pr
	type=semver,pattern={{version}}

	- name: Log in to the Container registry
	uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Create manifest list and push
	working-directory: /tmp/digests
	run: \|
	docker buildx imagetools create $(jq -cr '.tags \| map("-t " + .) \| join(" ")' <<< "$DOCKER_METADATA_OUTPUT_JSON") \
	$(printf '${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@sha256:%s ' *)

	- name: Inspect image
	run: \|
	docker buildx imagetools inspect ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ steps.meta.outputs.version }}

	cypress-merge-queue:
	name: 'cypress: default-group (merge)'
	if: github.event_name == 'merge_group'
	runs-on: ubuntu-latest
	steps:
	- run: echo "This does not do anything, it just fixes the required checks for cypress, since the Status checks are reported differently for the merge queue and the PRs"

	cypress-pr:
	name: 'cypress: default-group'
	if: github.event_name == 'pull_request'
	runs-on: ubuntu-latest
	steps:
	- run: echo "This does not do anything, it just fixes the required checks for cypress, since the Status checks are reported differently for the merge queue and the PRs"

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Test, build and push #7541

Workflow file

Test, build and push #7541

Jobs

Run details

Workflow file for this run