Skip to content

Latest commit

 

History

History
38 lines (30 loc) · 2.05 KB

README.md

File metadata and controls

38 lines (30 loc) · 2.05 KB
Raw

ts-bridge CI with Cloud Build

This CI automates the building and releasing of ts-bridge images for public use on Google Container Registry. ts-bridge images are built using Google Cloud Build through cloudbuild.yaml. To view the documentation for dev builds, please refer to CI with GitHub Actions.

Images are published externally and anyone can pull them from:

gcr.io/cre-tools/ts-bridge:{tag}

Cloud Build

The complete flowchart for CI is shown below:

TS-Bridge Cloud Build Flowchart

Triggers

Cloud Build triggers are configured purely on Google Cloud Platform (GCP, not on GitHub), which this repo is connected to. The CloudBuild trigger will occur on every push to a released tag.

cloudbuild.yaml

When a trigger event occurs, the trigger on Cloud Build has been configured to run ci/cloudbuild.yaml in this repository. It will complete the following:

  1. Build a ts-bridge image using the Dockerfile.
  2. Perform security scanning of images using Trivy. This can find image vulnerabilities of low, medium, high or critical severities.
    • If any vulnerabilities were found (of any level of severity), a Github issue will be created. For simplicity, at most one issue per release will be created, containing all the vulnerabilities found in that release.
    • If vulnerabilities with CRITICAL/HIGH severity were found, the build will fail and the images will not be pushed to GCR.
  3. If the previous step succeeded, push the image with the following tags to GCR.
    • latest
    • full, major and minor version
    • commit ID (prefixed with git-)
    • build ID (prefixed with build-)
    • timestamp
  4. The new image will be available for pulling from gcr.io/cre-tools/ts-bridge:{tag}