pb-create-action-aqua-security-dependency.yml

name: Create Action aqua-security-dependency
"on":
    pull_request:
        paths:
            - actions/*
            - actions/aqua-security-dependency/*
    push:
        branches:
            - main
        paths:
            - actions/*
            - actions/aqua-security-dependency/*
    release:
        types:
            - published
jobs:
    create-action:
        name: Create Action
        runs-on:
            - ubuntu-latest
        steps:
            - name: Docker login ghcr.io
              if: ${{ (github.event_name != 'pull_request' || ! github.event.pull_request.head.repo.fork) && (github.actor != 'dependabot[bot]') }}
              uses: docker/login-action@v3
              with:
                password: ${{ secrets.PAKETO_BOT_GITHUB_TOKEN }}
                registry: ghcr.io
                username: ${{ secrets.JAVA_GITHUB_USERNAME }}
            - uses: actions/checkout@v4
            - name: Create Action
              run: |
                #!/usr/bin/env bash

                set -euo pipefail

                echo "::group::Building ${TARGET}:${VERSION}"
                  docker build \
                    --file actions/Dockerfile \
                    --build-arg "SOURCE=${SOURCE}" \
                    --tag "${TARGET}:${VERSION}" \
                    .
                echo "::endgroup::"

                if [[ "${PUSH}" == "true" ]]; then
                  echo "::group::Pushing ${TARGET}:${VERSION}"
                    docker push "${TARGET}:${VERSION}"
                  echo "::endgroup::"
                else
                  echo "Skipping push"
                fi
              env:
                PUSH: ${{ github.event_name != 'pull_request' }}
                SOURCE: aqua-security-dependency
                TARGET: ghcr.io/paketo-buildpacks/actions/aqua-security-dependency
                VERSION: main