nightly-dev build

Author: valentijnscholten

.github/workflows/release-x-manual-tag-as-latest.yml

@@ -0,0 +1,58 @@
+name: "release-X: Merge container digests"
+
+env:
+  GIT_USERNAME: "DefectDojo release bot"
+  GIT_EMAIL: "dojo-release-bot@users.noreply.github.com"
+
+on:
+    workflow_dispatch:
+        inputs:
+          # the actual branch that can be chosen on the UI is made irrelevant by further steps
+          # because someone will forget one day to change it.
+          release_number:
+            type: string
+            description: 'Release version (x.y.z format)'
+            required: true
+
+    workflow_call:
+        inputs:
+          # the actual branch that can be chosen on the UI is made irrelevant by further steps
+          # because someone will forget one day to change it.
+          release_number:
+            type: string
+            description: 'Release version (x.y.z format)'
+            required: true
+
+jobs:
+  merge-digests:
+    runs-on: ubuntu-latest
+    strategy:
+        fail-fast: false
+        matrix:
+            docker-image: [django, nginx]
+
+    steps:
+      # deduce docker org name from git repo to make the build also work in forks
+    - id: Set-docker-org
+      run: echo "DOCKER_ORG=$(echo ${GITHUB_REPOSITORY%%/*} | tr '[:upper:]' '[:lower:]')" >> $GITHUB_ENV
+
+    - name: Login to DockerHub
+      uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+      with:
+        username: ${{ secrets.DOCKERHUB_USERNAME }}
+        password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+      # debian images are the default / official ones, and these were already tagged, so these get the latest tag
+    - name: Tag Debian with latest tags
+      working-directory: ${{ runner.temp }}/digests
+      run: |
+        set -x
+        docker buildx imagetools create -t "${{ env.DOCKER_ORG }}/defectdojo-${{ matrix.docker-image}}:latest" ${{ env.DOCKER_ORG }}/defectdojo-${{ matrix.docker-image}}:${{ inputs.release_number }}
+
+      # just for logging
+    - name: Inspect default images
+      run: |
+          docker buildx imagetools inspect ${{ env.DOCKER_ORG }}/defectdojo-${{ matrix.docker-image}}:latest