Bump github/codeql-action from 3.24.6 to 3.27.7 #247
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Image Check | |
| on: | |
| workflow_dispatch: | |
| pull_request: | |
| branches: ["main"] | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| diff: | |
| runs-on: distroless-ci-large-ubuntu-22.04 | |
| steps: | |
| - uses: actions/checkout@v4 | |
| - name: Set up Go | |
| uses: actions/setup-go@v5 | |
| with: | |
| go-version: "1.21" | |
| - uses: actions/cache@v4 | |
| with: | |
| path: | | |
| ~/.cache/bazel-repo | |
| key: bazel-cache-deps-ci2-${{ github.sha }} | |
| restore-keys: | | |
| bazel-cache-deps-ci2-${{ github.sha }} | |
| bazel-cache-deps-ci2- | |
| - name: Fetch | |
| run: | | |
| for i in $(seq 10); do | |
| bazel --bazelrc=$GITHUB_WORKSPACE/.github/workflows/ci.bazelrc cquery 'attr(tags, "amd64", ...)' && break | |
| sleep 10; | |
| done | |
| - name: Build all images | |
| run: bazel build //:sign_and_push | |
| - name: Install Deps | |
| run: | | |
| go install github.com/google/go-containerregistry/cmd/crane@main | |
| go install github.com/reproducible-containers/diffoci/cmd/diffoci@master | |
| go install filippo.io/mkcert@master | |
| sudo curl -fsSL "https://github.com/project-zot/zot/releases/download/v2.0.2-rc2/zot-linux-amd64-minimal" > /usr/local/bin/zot | |
| sudo chmod +x /usr/local/bin/zot | |
| - name: Diff All Images | |
| id: diff | |
| run: | | |
| ./private/tools/diff.bash \ | |
| --query-bazel --registry-spawn-https \ | |
| --head-ref ${{ github.head_ref }} \ | |
| --base-ref ${{ github.event.pull_request.base.ref }} \ | |
| --set-github-output-on-diff \ | |
| --skip-image-index \ | |
| --jobs $(($(nproc --all) * 2)) \ | |
| --logs ./verbose.log \ | |
| --report ./report.log | |
| - uses: actions/upload-artifact@v4 | |
| id: report | |
| with: | |
| name: "Report" | |
| path: | | |
| ./verbose.log | |
| ./report.log | |
| - uses: peter-evans/find-comment@v3 | |
| id: fc | |
| if: ${{ !github.event.pull_request.head.repo.fork }} | |
| with: | |
| issue-number: ${{ github.event.pull_request.number }} | |
| comment-author: "github-actions[bot]" | |
| body-includes: 🌳 🔄 Image Check | |
| - name: Report diff | |
| if: ${{ !github.event.pull_request.head.repo.fork && steps.diff.outputs.changed_targets }} | |
| uses: peter-evans/create-or-update-comment@v4 | |
| with: | |
| comment-id: ${{ steps.fc.outputs.comment-id }} | |
| issue-number: ${{ github.event.pull_request.number }} | |
| body: | | |
| 🌳 🔄 Image Check | |
| This pull request has modified the following images: | |
| ```starlark | |
| ${{steps.diff.outputs.changed_targets}} | |
| ``` | |
| You can check the details in the report [here](${{steps.report.outputs.artifact-url}}) | |
| edit-mode: replace | |
| - name: Report no diff | |
| if: ${{ !github.event.pull_request.head.repo.fork && !steps.diff.outputs.changed_targets }} | |
| uses: peter-evans/create-or-update-comment@v4 | |
| with: | |
| comment-id: ${{ steps.fc.outputs.comment-id }} | |
| issue-number: ${{ github.event.pull_request.number }} | |
| body: | | |
| 🌳 🔄 Image Check | |
| This pull request doesn't make any changes to the images. 👍 | |
| You can check the details in the report [here](${{steps.report.outputs.artifact-url}}) | |
| edit-mode: replace |