Skip to content

chore: update sha/version reference for action/checkout (#122) #50

chore: update sha/version reference for action/checkout (#122)

chore: update sha/version reference for action/checkout (#122) #50

name: Publish UDS Capability
on:
push:
branches:
- main
jobs:
tag-new-version:
permissions: write-all
runs-on: ubuntu-latest
outputs:
release_created: ${{ steps.release-flag.outputs.release_created }}
steps:
- name: Create Release Tag
id: tag
uses: googleapis/release-please-action@7987652d64b4581673a76e33ad5e98e3dd56832f # v4.1.3
with:
command: manifest # use configs in release-please-config.json
- id: release-flag
run: echo "release_created=${{ steps.tag.outputs.release_created || false }}" >> $GITHUB_OUTPUT
publish-uds-package:
needs: tag-new-version
if: ${{ needs.tag-new-version.outputs.release_created == 'true'}}
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
steps:
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
- name: Install UDS CLI
uses: defenseunicorns/setup-uds@b987a32bac3baeb67bfb08f5e1544e2f9076ee8a # v1.0.0
with:
# renovate: datasource=github-tags depName=defenseunicorns/uds-cli versioning=semver
version: v0.18.0
- name: Environment setup
run: |
uds run actions:setup-environment \
--set REGISTRY1_USERNAME="${{ secrets.IRON_BANK_ROBOT_USERNAME }}" \
--set REGISTRY1_PASSWORD="${{ secrets.IRON_BANK_ROBOT_PASSWORD }}" \
--set GH_TOKEN="${{ secrets.GITHUB_TOKEN }}" \
--set CHAINGUARD_IDENTITY="${{ secrets.CHAINGUARD_IDENTITY }}"
shell: bash
- name: Publish the capability
run: |
uds zarf package create --confirm -a arm64 -o oci://ghcr.io/defenseunicorns/packages
uds zarf package create --confirm -a amd64 -o oci://ghcr.io/defenseunicorns/packages