container-openvoxdb/.sync.yml at main · OpenVoxProject/container-openvoxdb · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
---
:global:
  matrix_command: bash matrix.sh build
  matrix_requires_yq: true
  build_runner: '${{ matrix.runner }}'
  build_file: 'Containerfile.${{ matrix.os }}'
  image_tag: 'ci/openvoxdb:${{ matrix.db_version }}-${{ matrix.os }}-${{ matrix.platform }}'
  build_platforms: 'linux/${{ matrix.platform }}'
  build_args:
    - 'OPENVOX_RELEASE=${{ matrix.release }}'
    - 'OPENVOXDB_VERSION=${{ matrix.db_version }}'
    - 'JDK_VERSION=${{ matrix.jdk_version }}'
    - 'PQL_VERSION=${{ matrix.pql_version }}'
.github/renovate.jsonc:
  renovate_custom_managers:
    - customType: regex
      managerFilePatterns:
        - /(^|/)Containerfile\.(?:alpine|ubuntu)$/
        - /(^|/)build_versions\.yaml$/
      matchStrings:
        - >-
          #\s*renovate:\s*datasource=(?<datasource>custom\.voxpupuli-artifacts)\s+depName=(?<depName>openvoxdb)\s*\n\s*(?:ARG\s+OPENVOXDB_VERSION=|db_version:\s*")(?<currentValue>\d+\.\d+\.\d+)
      versioningTemplate: semver
  renovate_custom_datasources:
    voxpupuli-artifacts:
      defaultRegistryUrlTemplate: 'https://artifacts.voxpupuli.org/{{packageName}}/'
      format: html
  renovate_package_rules:
    - matchDatasources:
        - custom.voxpupuli-artifacts
      allowedVersions: '/^8\./'
      extractVersion: '^(?<version>\d+\.\d+\.\d+)/$'
.github/workflows/ci.yml:
  general_ci_scan_dir: ./openvoxdb
  build_job_name: 'Build ${{ matrix.os }} / ${{ matrix.platform }} CI container'
.github/workflows/security_scanning.yml:
  scan_job_name: 'Scan ${{ matrix.os }} / ${{ matrix.platform }} container'
  sarif_category: 'grype-${{ matrix.os }}-${{ matrix.platform }}'
.github/workflows/build_container.yml:
  publish_tag_patterns:
    - 'v*'
  publish_build_job_name: 'Build OpenVoxDB ${{ matrix.db_version }} (${{ matrix.os }}/${{ matrix.platform }})'
  publish_build_arch: 'linux/${{ matrix.platform }}'
  publish_tags:
    - 'ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}-${{ github.sha }}-${{ matrix.os }}-${{ matrix.platform }}'
  publish_manifest_matrix_command: bash matrix.sh tag
  publish_manifest_steps:
    - name: Create ref-specific Ubuntu manifest
      commands:
        - >-
          docker buildx imagetools create
          -t ghcr.io/openvoxproject/openvoxdb:${{ matrix.db_version }}-${{ github.ref_name }}
          -t ghcr.io/openvoxproject/openvoxdb:${{ matrix.db_version }}
          -t ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}
          -t docker.io/voxpupuli/openvoxdb:${{ matrix.db_version }}-${{ github.ref_name }}
          -t docker.io/voxpupuli/openvoxdb:${{ matrix.db_version }}
          -t docker.io/voxpupuli/openvoxdb:${{ matrix.release }}
          ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}-${{ github.sha }}-ubuntu-arm64
          ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}-${{ github.sha }}-ubuntu-amd64
    - name: Create ref-specific Alpine manifest
      commands:
        - >-
          docker buildx imagetools create
          -t ghcr.io/openvoxproject/openvoxdb:${{ matrix.db_version }}-${{ github.ref_name }}-alpine
          -t ghcr.io/openvoxproject/openvoxdb:${{ matrix.db_version }}-alpine
          -t ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}-alpine
          -t docker.io/voxpupuli/openvoxdb:${{ matrix.db_version }}-${{ github.ref_name }}-alpine
          -t docker.io/voxpupuli/openvoxdb:${{ matrix.db_version }}-alpine
          -t docker.io/voxpupuli/openvoxdb:${{ matrix.release }}-alpine
          ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}-${{ github.sha }}-alpine-arm64
          ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}-${{ github.sha }}-alpine-amd64
    - name: Update floating Ubuntu tag
      if: "github.ref == 'refs/heads/main'"
      commands:
        - >-
          docker buildx imagetools create
          -t ghcr.io/openvoxproject/openvoxdb:latest
          -t docker.io/voxpupuli/openvoxdb:latest
          ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}-${{ github.sha }}-ubuntu-arm64
          ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}-${{ github.sha }}-ubuntu-amd64
    - name: Update floating Alpine tag
      if: "github.ref == 'refs/heads/main'"
      commands:
        - >-
          docker buildx imagetools create
          -t ghcr.io/openvoxproject/openvoxdb:latest-alpine
          -t docker.io/voxpupuli/openvoxdb:latest-alpine
          ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}-${{ github.sha }}-alpine-arm64
          ghcr.io/openvoxproject/openvoxdb:${{ matrix.release }}-${{ github.sha }}-alpine-amd64
  dockerhub_repository: voxpupuli/openvoxdb