mirror of
https://github.com/zkldi/Tachi.git
synced 2026-09-25 16:37:58 +03:00
123 lines
4.0 KiB
YAML
123 lines
4.0 KiB
YAML
name: GitHub Bot CI/CD
|
|
|
|
on:
|
|
push:
|
|
branches:
|
|
- "main"
|
|
paths:
|
|
- "typescript/github-bot/**"
|
|
- "docker/Dockerfile.ghbot"
|
|
- ".github/workflows/github-bot.yml"
|
|
pull_request:
|
|
branches:
|
|
- "main"
|
|
paths:
|
|
- "typescript/github-bot/**"
|
|
- "docker/Dockerfile.ghbot"
|
|
- ".github/workflows/github-bot.yml"
|
|
workflow_dispatch:
|
|
|
|
permissions:
|
|
contents: read
|
|
|
|
concurrency:
|
|
group: "github-bot-${{ github.ref }}-${{ github.workflow }}"
|
|
cancel-in-progress: false
|
|
|
|
jobs:
|
|
test:
|
|
runs-on: ubuntu-latest
|
|
container:
|
|
image: ghcr.io/zkldi/tachi-ci:main
|
|
options: --user root
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Install dependencies
|
|
run: bun install --frozen-lockfile
|
|
|
|
- name: Lint code
|
|
run: bun run --filter tachi-github-bot lint
|
|
|
|
- name: Typecheck code
|
|
run: bun run --filter tachi-github-bot typecheck
|
|
|
|
docker-push:
|
|
runs-on: ubuntu-latest
|
|
needs: [test]
|
|
if: ${{ github.event_name == 'push' || github.event_name == 'workflow_dispatch' }}
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
outputs:
|
|
image_tag: ${{ steps.revision.outputs.image_tag }}
|
|
steps:
|
|
- name: Checkout
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
persist-credentials: false
|
|
|
|
- name: Revision tag (YYYYMMDD-shortsha + full SHA aliases)
|
|
id: revision
|
|
run: |
|
|
set -eu
|
|
short=$(git rev-parse --short=7 HEAD)
|
|
d=$(TZ=UTC0 git log -1 --format=%cd --date=format:%Y%m%d HEAD)
|
|
echo "image_tag=${d}-${short}" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Log in to GHCR
|
|
uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
|
|
|
|
- name: Set build time
|
|
id: build_time
|
|
run: echo "value=$(date -u +%Y-%m-%dT%H:%M:%SZ)" >> "$GITHUB_OUTPUT"
|
|
|
|
- name: Build and push
|
|
uses: docker/build-push-action@bcafcacb16a39f128d818304e6c9c0c18556b85f # v7.1.0
|
|
with:
|
|
context: .
|
|
file: docker/Dockerfile.ghbot
|
|
push: ${{ github.ref == 'refs/heads/main' }}
|
|
provenance: true
|
|
sbom: true
|
|
tags: |
|
|
ghcr.io/zkldi/tachi-ghbot:${{ steps.revision.outputs.image_tag }}
|
|
ghcr.io/zkldi/tachi-ghbot:${{ github.sha }}
|
|
ghcr.io/zkldi/tachi-ghbot:main
|
|
ghcr.io/zkldi/tachi-ghbot:latest
|
|
build-args: |
|
|
GIT_REVISION=${{ github.sha }}
|
|
BUILD_TIME=${{ steps.build_time.outputs.value }}
|
|
cache-from: type=gha,scope=${{ github.ref_name }}-github-bot
|
|
cache-to: type=gha,mode=max,scope=${{ github.ref_name }}-github-bot
|
|
|
|
dispatch-deploy:
|
|
# See server.yml for rationale — deploy logs live in the private server-ceres repo.
|
|
runs-on: ubuntu-latest
|
|
needs: [test, docker-push]
|
|
if: ${{ github.ref == 'refs/heads/main' && (github.event_name == 'push' || github.event_name == 'workflow_dispatch') }}
|
|
steps:
|
|
- name: Dispatch deploy
|
|
env:
|
|
GH_TOKEN: ${{ secrets.DEPLOY_DISPATCH_TOKEN }}
|
|
SHA: ${{ github.sha }}
|
|
IMAGE_TAG: ${{ needs.docker-push.outputs.image_tag }}
|
|
run: |
|
|
gh api repos/zkldi/server-ceres/dispatches \
|
|
-f event_type=deploy \
|
|
-F "client_payload[app]=ghbot" \
|
|
-F "client_payload[dest]=-" \
|
|
-F "client_payload[sha]=${SHA}" \
|
|
-F "client_payload[image_tag]=${IMAGE_TAG}"
|
|
echo "::notice::Dispatched ghbot ${IMAGE_TAG} (${SHA}) — logs: https://github.com/zkldi/server-ceres/actions/workflows/tachi-deploy.yml"
|