feat: make it work for serp #223
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: DAGs Container | |
| on: | |
| pull_request: | |
| # Ignore PRs on branches specifically intended for other assets | |
| branches-ignore: [] | |
| # Only consider PRs that change files for this asset, including ci scripts | |
| paths: | |
| - '.github/workflows/dags-flake8.yaml' | |
| - '.github/workflows/dags-container.yaml' | |
| - 'containers/dags/**' | |
| - 'dags/**' | |
| # Make sure all workflows that are "required checks" for a given | |
| # branch protection rule have the same paths: and branches-ignore: | |
| # filters. Otherwise, you can end up in a deadlock waiting on a | |
| # required check that will never be executed. | |
| push: | |
| # Only release off of release and maintenance branches for this asset | |
| branches: | |
| - 'maintenance/dags-container/[0-9]+.x.x' | |
| - 'maintenance/dags-container/[0-9]+.[0-9]+.x' | |
| - 'main' | |
| # Only consider pushes that change files for this asset, including ci scripts | |
| paths: | |
| - '.github/workflows/dags-container.yaml' | |
| - 'containers/dags/**' | |
| - 'dags/**' | |
| permissions: | |
| contents: write | |
| pull-requests: write | |
| actions: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| # Needed to generate releases safely | |
| cancel-in-progress: false | |
| jobs: | |
| # Job name must be unique across repo to target | |
| # branch protection rules "required checks" properly! | |
| dags-container: | |
| uses: SwanseaUniversityMedical/workflows/.github/workflows/pr-and-release-container.yaml@v1.8.1-containers | |
| with: | |
| job-name: dags-container | |
| registry: ${{ vars.HARBOR_REGISTRY }} | |
| registry-user: ${{ vars.HARBOR_USER }} | |
| registry-repo: dare/airflow/dags | |
| release-tag-format: 'dags-${version}' | |
| release-branches: | | |
| [ | |
| 'maintenance/dags-container/[0-9]+\.([0-9]+|x)\.x', | |
| 'main' | |
| ] | |
| cosign-public-key: ${{ vars.COSIGN_PUBLIC_KEY }} | |
| slack-channel: ${{ vars.SLACK_CHANNEL }} | |
| build-file: containers/dags/Dockerfile | |
| build-context: . | |
| secrets: | |
| cosign-private-key: ${{ secrets.COSIGN_PRIVATE_KEY }} | |
| cosign-password: ${{ secrets.COSIGN_PASSWORD }} | |
| registry-token: ${{ secrets.HARBOR_TOKEN }} | |
| slack-token: ${{ secrets.SLACK_TOKEN }} |