Skip to content

Update deployment.yml #66

Update deployment.yml

Update deployment.yml #66

Workflow file for this run

name: Docker Build
on:
push:
branches: [master, dev]
jobs:
docker_build:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Extract Environment
shell: bash
run: echo "##[set-output name=env;]$([ "${GITHUB_REF##*/}" == "master" ] && echo "prod" || echo "beta")"
id: extract_environment
- name: Extract Repo Name
shell: bash
run: echo "##[set-output name=repo;]$(echo ${GITHUB_REPOSITORY##*/})"
id: extract_repo
-
name: Checkout
uses: actions/checkout@v2
-
name: Set up QEMU
uses: docker/setup-qemu-action@v1
-
name: Set up Docker Buildx
uses: docker/setup-buildx-action@v1
-
name: Login to DockerHub
uses: docker/login-action@v1
with:
username: ${{ secrets.DOCKERHUB_USERNAME }}
password: ${{ secrets.DOCKERHUB_TOKEN }}
-
name: Build and push
uses: docker/build-push-action@v2
with:
context: .
push: true
tags: ${{ secrets.DOCKERHUB_USERNAME }}/${{ steps.extract_repo.outputs.repo }}:${{ steps.extract_environment.outputs.env }}
security_scan:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v2
- name: Set tag var
id: vars
run: echo ::set-output name=docker_tag::$(echo ${GITHUB_REF} | cut -d'/' -f3)-${GITHUB_SHA}
- name: Build the Docker image
run: docker build . --file Dockerfile --tag myapp:${{ steps.vars.outputs.docker_tag }}
- name: Scan with Phonito Security
uses: phonito/phonito-scanner-action@master
with:
image: myapp:${{ steps.vars.outputs.docker_tag }}
phonito-token: ${{ secrets.PHONITO_TOKEN }}