FilesExpand file tree

develop

/

cli-go-mirror.yml

Copy path

View runs

Blame

More file actions

Blame

More file actions

Latest commit

 

History

History

History

64 lines (61 loc) · 2.21 KB

develop

/

cli-go-mirror.yml

Copy path

Top

File metadata and controls

• Code
• Blame

64 lines (61 loc) · 2.21 KB

Raw

Copy raw file

Download raw file

Open symbols panel

Edit and raw actions

1

2

3

4

5

6

7

8

9

10

11

12

13

14

15

16

17

18

19

20

21

22

23

24

25

26

27

28

29

30

31

32

33

34

35

36

37

38

39

40

41

42

43

44

45

46

47

48

49

50

51

52

53

54

55

56

57

58

59

60

61

62

63

64

name: Mirror Dependencies

# We mirror upstream container images like Migra, imgproxy, etc. because these

# are usually only available on certain image registry and not others (e.g. only

# on Docker Hub and not on ghcr.io or AWS ECR).

#

# For container images that we control, we usually publish to Docker Hub,

# ghcr.io, and AWS ECR.

on:

# This workflow is the manual/bulk entry point for re-mirroring everything.

# Template image bumps are mirrored automatically by mirror-template-images.yml

# on push to develop, which backfills any unmirrored tag when the templates

# Dockerfile changes — so anyone pinning SUPABASE_INTERNAL_IMAGE_REGISTRY=ghcr.io

# doesn't inherit a `manifest unknown` failure. (No CI job pins that registry

# anymore -- see mirror-template-images.yml's own comment for why, CLI-1966.)

workflow_dispatch:

permissions:

contents: read

jobs:

setup:

runs-on: blacksmith-2vcpu-ubuntu-2404

outputs:

tags: ${{ steps.list.outputs.tags }}

curr: ${{ steps.curr.outputs.tags }}

steps:

- uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1

with:

persist-credentials: false

- uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0

with:

go-version-file: apps/cli-go/go.mod

cache: true

- id: list

run: |

echo "tags=$(go run tools/listdep/main.go)" >> $GITHUB_OUTPUT

- id: curr

name: List main branch dependencies

if: github.ref != 'refs/heads/main'

run: |

git fetch origin main

git checkout main

echo "tags=$(go run tools/listdep/main.go)" >> $GITHUB_OUTPUT

publish:

needs:

- setup

permissions:

contents: read

packages: write

id-token: write

if: ${{ needs.setup.outputs.tags != needs.setup.outputs.curr }}

strategy:

matrix:

src: ${{ fromJson(needs.setup.outputs.tags) }}

# Call workflow explicitly because events from actions cannot trigger more actions

uses: ./.github/workflows/cli-go-mirror-image.yml

with:

image: ${{ matrix.src }}

secrets:

PROD_AWS_ROLE: ${{ secrets.PROD_AWS_ROLE }}

defaults:

run:

working-directory: apps/cli-go