shared-publish-to-docker-versioned.yaml

name: Shared Pipeline to build and publish images to Docker
on:
  workflow_call:
    inputs:
      release_type:
        description: The type of version number to return. Must be one of [Snapshot, Patch, Minor or Major]
        required: true
        type: string
      publish_vulnerabilities:
        description: If true, will attempt to publish any vulnerabilities to GitHub. Defaults to true. Set to false for private repos.
        type: string
        default: 'true'
      version_number_input:
        description: The version number to publish for the docker repo
        type: string
        default: ''
      force_release:
        description: If 'yes', will force the creation a release, if 'no' will not create a release. 'branch' will use release_type and the branch to determine if a release should be created.
        type: string
        default: 'branch'
    # outputs:
    #   version_number_output:
    #     description: The complete version number 
    #     value: ${{ jobs.buildImage.outputs.jar_version }}
    #   image_tag:
    #     description: The tag used to describe the image in docker
    #     value: ${{ jobs.buildImage.outputs.image_tag }}
env:
  REGISTRY: ghcr.io
  IMAGE_NAME: ${{ github.repository }}
jobs:
  buildImage:
    name: Build Image
    runs-on: ubuntu-latest
    permissions:
      contents: write
      security-events: write
      packages: write
      pull-requests: write
    outputs:
      jar_version: ${{ inputs.version_number_input }}
      image_tag: ${{ steps.updatePom.outputs.image_tag }}
    steps:
      - name: Setup
        id: setup
        uses: IABTechLab/uid2-shared-actions/actions/shared_publish_setup@kcc-UID2-2674-implement-shared-publish-to-docker-versioned
        with:
          release_type: ${{ inputs.release_type }}

      - name: Publish to Docker
        id: publishToDocker
        uses:IABTechLab/uid2-shared-actions/actions/shared_publish_to_docker@kcc-UID2-2674-implement-shared-publish-to-docker-versioned
        with:
          version_number_input: ${{ inputs.version_number_input }}
          image_tag: ${{ inputs.version_number_input }}
          not_snapshot: ${{ steps.setup.outputs.not_snapshot }}

      # - name: Generate Trivy vulnerability scan report
      #   uses: aquasecurity/trivy-action@0.14.0
      #   if: inputs.publish_vulnerabilities == 'true'
      #   with:
      #     image-ref: ${{ steps.extractImageTag.outputs.firstTag }}
      #     format: 'sarif'
      #     exit-code: '0'
      #     ignore-unfixed: true
      #     severity: 'CRITICAL,HIGH'
      #     output: 'trivy-results.sarif'
      #     hide-progress: true

      # - name: Upload Trivy scan report to GitHub Security tab
      #   uses: github/codeql-action/upload-sarif@v2
      #   if: inputs.publish_vulnerabilities == 'true'
      #   with:
      #     sarif_file: 'trivy-results.sarif'

      # - name: Test with Trivy vulnerability scanner
      #   uses: aquasecurity/trivy-action@0.14.0
      #   with:
      #     image-ref: ${{ steps.extractImageTag.outputs.firstTag }}
      #     format: 'table'
      #     exit-code: '1'
      #     ignore-unfixed: true
      #     severity: 'CRITICAL'
      #     hide-progress: true

      # - name: Push to Docker
      #   uses: docker/build-push-action@v5
      #   with:
      #     context: .
      #     push: true
      #     tags: ${{ steps.meta.outputs.tags }}
      #     labels: ${{ steps.meta.outputs.labels }}
      #     build-args: |
      #       JAR_VERSION=${{ inputs.version_number_input }}
      #       IMAGE_VERSION=${{ inputs.version_number_input }}

      # - name: Build Changelog
      #   id: github_release
      #   if: ${{ steps.setup.outputs.is_release == 'true' }}
      #   uses: mikepenz/release-changelog-builder-action@v3
      #   with:
      #     toTag: v${{ inputs.version_number_input }}
      #     configurationJson: |
      #       {
      #         "template": "#{{CHANGELOG}}\n## Installation\n```\ndocker pull ${{ steps.meta.outputs.tags }}\n```\n\n## Image reference to deploy: \n```\n${{ steps.updatePom.outputs.image_tag }}\n```\n\n## Changelog\n#{{UNCATEGORIZED}}",
      #         "pr_template": " - #{{TITLE}} - ( PR: ##{{NUMBER}} )"
      #       }
      #   env:
      #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

      # - name: Create Release
      #   if: ${{ steps.setup.outputs.is_release == 'true' }}
      #   uses: softprops/action-gh-release@v1
      #   with:
      #     name: ${{ inputs.version_number_input }}
      #     body: ${{ steps.github_release.outputs.changelog }}
      #     draft: true