Test ECR Publishing #54

	name: Test ECR Publishing
	on:
	schedule:
	- cron: '0 7 * * * ' ## Every day at 0700 UTC
	workflow_dispatch: ## Give us the ability to run this manually


	# Abort prior jobs in the same workflow / PR
	concurrency:
	group: ecr-publish-${{ github.ref }}
	cancel-in-progress: true

	permissions:
	id-token: write
	contents: read

	jobs:
	ecr-nightly-test:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout
	uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1

	- name: Setup golang
	uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
	with:
	go-version-file: go.mod

	- name: Build the Zarf binary
	run: make build-cli-linux-amd

	- name: Auth with AWS
	uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
	with:
	role-to-assume: ${{ secrets.AWS_NIGHTLY_ROLE }}
	role-session-name: ${{ github.job \|\| github.event.client_payload.pull_request.head.sha \|\| github.sha }}
	aws-region: us-east-1
	role-duration-seconds: 3600

	# NOTE: The aws cli will need to be explicitly installed on self-hosted runners
	- name: Login to the ECR Registry
	run: aws ecr-public get-login-password --region us-east-1 \| ./build/zarf tools registry login --username AWS --password-stdin public.ecr.aws

	- name: Test publishing and pulling to ECR
	run: go test ./src/test/nightly/ecr_publish_test.go

	- name: Save logs
	if: always()
	uses: ./.github/actions/save-logs

	- name: Send trigger to Slack on workflow failure
	if: failure()
	uses: ./.github/actions/slack
	with:
	slack-webhook-url: ${{ secrets.SLACK_WEBHOOK_URL }}

Provide feedback