docker.yml

name: "Docker Build"

on:
  push:
    branches:
      - master
    tags:
      # todo: update for 1.0
      - 0.*

jobs:

  Publish:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v2
      - name: Set up Python 3.8
        uses: actions/setup-python@v1
        with:
          python-version: 3.8
      - name: Install Docker Build Env
        # bin directory is in .dockerignore
        run: |
          python -m pip install --upgrade pip
          pip install docker click pytest pyyaml six
          mkdir -p bin
          wget -q -O bin/trivy.tgz https://github.com/aquasecurity/trivy/releases/download/v0.5.4/trivy_0.5.4_Linux-64bit.tar.gz
          cd bin && tar xzf trivy.tgz

      # For *lightweight* functional image tests
      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.DOCKER_CI_AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.DOCKER_CI_AWS_SECRET_ACCESS_KEY }}
          aws-region: us-east-1

      # Ubuntu images
      - name: cli
        env:
          HUB_USER: c7nbuild
          HUB_TOKEN: ${{ secrets.DOCKER_CI_HUB_TOKEN }}
        run: |
          python tools/dev/dockerpkg.py build -v --test --scan --push -t auto -r cloudcustodian -i cli

      - name: org
        env:
          HUB_USER: c7nbuild
          HUB_TOKEN: ${{ secrets.DOCKER_CI_HUB_TOKEN }}
        run: |
          python tools/dev/dockerpkg.py build -v --test --scan --push -t auto -r cloudcustodian -i org

      - name: mailer
        env:
          HUB_USER: c7nbuild
          HUB_TOKEN: ${{ secrets.DOCKER_CI_HUB_TOKEN }}
        run: |
          python tools/dev/dockerpkg.py build -v --test --scan --push -t auto -r cloudcustodian -i mailer

      - name: policystream
        env:
          HUB_USER: c7nbuild
          HUB_TOKEN: ${{ secrets.DOCKER_CI_HUB_TOKEN }}
        run: |
          python tools/dev/dockerpkg.py build -v --test --scan --push -t auto -r cloudcustodian -i policystream