mirror of
https://github.com/kata-containers/kata-containers.git
synced 2026-05-17 13:04:23 +00:00
af4ced32f4
It is good practice to add concurrency limits to automatically cancel jobs that have been superceded and potentially stop race conditions if we try and get artifacts by workflows and job id rather than run id. See https://docs.zizmor.sh/audits/#concurrency-limits Assisted-by: IBM Bob Signed-off-by: stevenhorsman <steven@uk.ibm.com>
48 lines
1.4 KiB
YAML
48 lines
1.4 KiB
YAML
# Push gperf and busybox tarballs to the ORAS cache (ghcr.io) so that
|
|
# download-with-oras-cache.sh can pull them instead of hitting upstream.
|
|
# Runs when versions.yaml changes on main (e.g. after a PR merge) or manually.
|
|
name: CI | Push ORAS tarball cache
|
|
on:
|
|
push:
|
|
branches:
|
|
- main
|
|
paths:
|
|
- 'versions.yaml'
|
|
workflow_dispatch:
|
|
|
|
permissions: {}
|
|
|
|
concurrency:
|
|
group: ${{ github.workflow }}-${{ github.event.pull_request.number || github.ref }}
|
|
cancel-in-progress: true
|
|
|
|
jobs:
|
|
push-oras-cache:
|
|
name: push-oras-cache
|
|
runs-on: ubuntu-22.04
|
|
permissions:
|
|
contents: read
|
|
packages: write
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
|
|
with:
|
|
fetch-depth: 0
|
|
persist-credentials: false
|
|
|
|
- name: Install yq
|
|
run: ./ci/install_yq.sh
|
|
|
|
- name: Install ORAS
|
|
uses: oras-project/setup-oras@22ce207df3b08e061f537244349aac6ae1d214f6 # v1.2.4
|
|
with:
|
|
version: "1.2.0"
|
|
|
|
- name: Populate ORAS tarball cache
|
|
run: ./tools/packaging/scripts/populate-oras-tarball-cache.sh all
|
|
env:
|
|
ARTEFACT_REGISTRY: ghcr.io
|
|
ARTEFACT_REPOSITORY: kata-containers
|
|
ARTEFACT_REGISTRY_USERNAME: ${{ github.actor }}
|
|
ARTEFACT_REGISTRY_PASSWORD: ${{ secrets.GITHUB_TOKEN }}
|