Upload trivy results to Github #1627
Workflow file for this run
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Precommit - Integration Tests - function-runner-images | |
| on: | |
| pull_request: | |
| branches: | |
| - '*' | |
| paths-ignore: | |
| - 'docs/**' | |
| - 'README.md' | |
| - 'CHANGELOG.md' | |
| - 'PROJECT' | |
| - 'LICENSE' | |
| - 'mesh-worker-service/README.md' | |
| - 'tools/README.md' | |
| jobs: | |
| test: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: clean disk | |
| run: | | |
| sudo swapoff -a | |
| sudo rm -rf /swapfile /usr/share/dotnet /usr/local/lib/android /opt/ghc | |
| sudo apt clean | |
| docker rmi $(docker images -q) -f | |
| df -h | |
| # the runner machine has a disk /dev/sdb1 which mounted to /mnt, and it has more free disk than /dev/sda1. | |
| # we can use it to save docker's data to avoid bookie error due to lack of disk. | |
| - name: change docker data dir | |
| run: | | |
| sudo service docker stop | |
| echo '{ "exec-opts": ["native.cgroupdriver=cgroupfs"], "cgroup-parent": "/actions_job", "data-root": "/mnt/docker" }' | sudo tee /etc/docker/daemon.json | |
| sudo service docker start | |
| - name: Checkout | |
| uses: actions/checkout@v2 | |
| with: | |
| fetch-depth: 0 | |
| ref: ${{ github.event.pull_request.head.sha }} | |
| - name: Setup ssh access to build runner VM | |
| uses: ./.github/actions/ssh-access | |
| with: | |
| limit-access-to-actor: true | |
| - name: Deploy k8s cluster env | |
| uses: nick-invision/retry@v2 | |
| with: | |
| timeout_minutes: 60 | |
| max_attempts: 3 | |
| retry_on: error | |
| command: | | |
| .ci/deploy_pulsar_cluster.sh .ci/clusters/values_runner_images.yaml | |
| on_retry_command: | | |
| .ci/cleanup.sh | |
| - name: Build runner images | |
| env: | |
| DOCKER_REPO: localhost:5000 | |
| run: | | |
| PULSAR_IMAGE_TAG=3.2.2.1 PULSAR_IMAGE=streamnative/sn-platform KIND_PUSH=false images/build.sh | |
| - name: Verify function runner | |
| run: | | |
| .ci/verify_function_runner.sh | |
| - name: Wait for ssh connection when build fails | |
| uses: ./.github/actions/ssh-access | |
| if: failure() | |
| continue-on-error: true | |
| with: | |
| action: wait |