diff --git a/.github/workflows/release-container-helperimage.yaml b/.github/workflows/release-container-helperimage.yaml index f5f31279..8aa3be07 100644 --- a/.github/workflows/release-container-helperimage.yaml +++ b/.github/workflows/release-container-helperimage.yaml @@ -16,13 +16,33 @@ jobs: echo "RELEASE_VERSION=$(grep "Version =" images/helper/version.go | awk -F'"' '{print $2}')" >> $GITHUB_ENV echo "RELEASE_COMMIT=$(git rev-parse --verify HEAD)" >> $GITHUB_ENV echo "RELEASE_DATE=$(date --iso-8601=seconds)" >> $GITHUB_ENV + - name: copy license to helper image dir + run: cp LICENSE images/helper/ + - name: Set up QEMU + uses: docker/setup-qemu-action@v3 + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v3 - name: Login to DockerHub uses: docker/login-action@v3 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} - - name: docker build - run: make docker-build-helper IMG=humio/humio-operator-helper:${{ env.RELEASE_VERSION }} IMG_BUILD_ARGS="--label version=${{ env.RELEASE_VERSION }} --label release=${{ github.run_id }} --build-arg RELEASE_VERSION=${{ env.RELEASE_VERSION }} --build-arg RELEASE_COMMIT=${{ env.RELEASE_COMMIT }} --build-arg RELEASE_DATE=${{ env.RELEASE_DATE }}" + - name: Build but don't push + uses: docker/build-push-action@v5 + with: + context: images/helper + # Because we use a container scanner pre-push we don't specify platform here so only the runner platform builds + # platforms: linux/amd64,linux/arm64 + load: true + tags: ${{ github.repository_owner }}/humio-operator-helper:${{ env.RELEASE_VERSION }} + labels: | + version=${{ env.RELEASE_VERSION }} + release=${{ github.run_id }} + build-args: | + RELEASE_VERSION=${{ env.RELEASE_VERSION }} + RELEASE_COMMIT=${{ env.RELEASE_COMMIT }} + RELEASE_DATE=${{ env.RELEASE_DATE }} + cache-to: type=local,type=registry,type=gha - name: Set up Python uses: actions/setup-python@v5 - name: Install dependencies @@ -32,12 +52,27 @@ jobs: python -m pip install --upgrade retry pip install retry - name: CrowdStrike Container Image Scan Operator Helper + if: github.repository_owner == 'humio' uses: crowdstrike/container-image-scan-action@v1 with: falcon_client_id: 1cd30708cb31442f85a6eec83279fe7b - container_repository: humio/humio-operator-helper + container_repository: ${{ github.repository_owner }}/humio-operator-helper container_tag: ${{ env.RELEASE_VERSION }} env: FALCON_CLIENT_SECRET: "${{ secrets.FALCON_CLIENT_SECRET }}" - - name: docker push - run: make docker-push IMG=humio/humio-operator-helper:${{ env.RELEASE_VERSION }} + - name: Build and push + uses: docker/build-push-action@v5 + with: + context: images/helper + platforms: linux/amd64,linux/arm64 + push: true + tags: ${{ github.repository_owner }}/humio-operator-helper:${{ env.RELEASE_VERSION }} + labels: | + version=${{ env.RELEASE_VERSION }} + release=${{ github.run_id }} + build-args: | + RELEASE_VERSION=${{ env.RELEASE_VERSION }} + RELEASE_COMMIT=${{ env.RELEASE_COMMIT }} + RELEASE_DATE=${{ env.RELEASE_DATE }} + cache-from: type=gha, mode=max + cache-to: type=gha