use external scripts to get git sha

near · Jul 24, 2023 · a18f51b · a18f51b
1 parent 0230285
commit a18f51b
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 3 deletions.
diff --git a/infra/main.tf b/infra/main.tf
@@ -20,8 +20,6 @@ locals {
   client_email = jsondecode(local.credentials).client_email
   client_id    = jsondecode(local.credentials).client_id
 
-  git_commit_hash = trimspace(file("../.git/${trimspace(trimprefix(file("../.git/HEAD"), "ref:"))}"))
-
   env = {
     defaults = {
       near_rpc          = "https://rpc.testnet.near.org"
@@ -43,6 +41,10 @@ locals {
   workspace = merge(local.env["defaults"], contains(keys(local.env), terraform.workspace) ? local.env[terraform.workspace] : local.env["defaults"])
 }
 
+data "external" "git_checkout" {
+  program = ["${path.module}/scripts/get_sha.sh"]
+}
+
 provider "google" {
   credentials = local.credentials
 
@@ -90,7 +92,7 @@ resource "docker_registry_image" "mpc_recovery" {
 }
 
 resource "docker_image" "mpc_recovery" {
-  name = "${var.region}-docker.pkg.dev/${var.project}/${google_artifact_registry_repository.mpc_recovery.name}/mpc-recovery-${var.env}:${local.git_commit_hash}"
+  name = "${var.region}-docker.pkg.dev/${var.project}/${google_artifact_registry_repository.mpc_recovery.name}/mpc-recovery-${var.env}:${data.external.git_checkout.result.sha}"
   build {
     context = "${path.cwd}/.."
   }

diff --git a/infra/scripts/get_sha.sh b/infra/scripts/get_sha.sh
@@ -0,0 +1,4 @@
+#!/bin/bash
+set -euo pipefail
+
+echo '{"sha": "'"$(git rev-parse HEAD)"'"}'