ci: pin referenced workflows to latest commit #27
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish | ||
| on: | ||
| push: | ||
| branches: | ||
| - devel | ||
| - master | ||
| workflow_dispatch: {} | ||
| concurrency: | ||
| # only run one publishing at a time to avoid conflicts in artifactory | ||
| group: ${{ github.workflow }}-${{ github.ref }} | ||
| cancel-in-progress: true | ||
| jobs: | ||
| artifacts: | ||
| uses: wetransform/gha-workflows/.github/workflows/gradle-library.yml@ef7e7ff0d5f77914d591c783f3dcf854e3c4e204 | ||
| with: | ||
| java-version: 17 | ||
| build-tasks: clean check distZip buildDeb | ||
| publish-tasks: publish | ||
| upload-artifact-path: build/distributions | ||
| upload-artifact-name: distributions | ||
| secrets: | ||
| SLACK_NOTIFICATIONS_BOT_TOKEN: ${{ secrets.SLACK_NOTIFICATIONS_BOT_TOKEN }} | ||
| docker: | ||
| # FIXME both master and devel will push latest - only one should | ||
| uses: wetransform/gha-workflows/.github/workflows/gradle-service-publish.yml@ef7e7ff0d5f77914d591c783f3dcf854e3c4e204 | ||
| with: | ||
| java-version: 17 | ||
| image-tag: wetransform/hale-cli:latest # image to scan | ||
| # don't run tests since this is already done in artifacts | ||
| gradle-tasks: clean dockerPushImage | ||
| expect-tests: false | ||
| secrets: | ||
| DOCKER_HUB_USERNAME: ${{ secrets.DOCKER_HUB_USERNAME }} | ||
| DOCKER_HUB_PASSWORD: ${{ secrets.DOCKER_HUB_PASSWORD }} | ||
| SLACK_NOTIFICATIONS_BOT_TOKEN: ${{ secrets.SLACK_NOTIFICATIONS_BOT_TOKEN }} | ||
