Skip to content

Docker Build Scan

Docker Build Scan #9

name: Docker Build Scan
on:
workflow_dispatch:
inputs:
image:
description: 'Image to build'
required: true
type: choice
options:
- 'op-ci-builder'
- 'op-node'
- 'op-batcher'
- 'op-proposer'
- 'op-proxyd'
- 'op-ufm'
- 'op-bedrock-l1'
- 'op-bedrock-l2'
- 'ops-bedrock'
- 'op-indexer'
- 'op-heartbeat'
- 'op-exporter'
- 'op-program'
- 'op-indexer-ui'
- 'op-challenger'
- 'op-endpoint-monitor'
- 'op-opwheel'
sha:
description: 'SHA of the commit to build. Required for all images except op-ci-builder'
required: false
default: ''
jobs:
check-inputs:
runs-on: ubuntu-latest
steps:
- name: Check workflow inputs
run: |
if [ -z "${{ github.event.inputs.image }}" ]; then
echo "Image is required"
exit 1
else if [ "${{ github.event.inputs.image }}" != "op-ci-builder" ] && [ -z "${{ github.event.inputs.sha }}" ]; then
echo "SHA is required for all images except op-ci-builder"
exit 1
fi
build-scan-container-ci-builder:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-ci-builder-${{ github.sha }}
file: ops/docker/ci-builder/Dockerfile
context: .
build-scan-container-op-node:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-node-${{ github.sha }}
file: op-node/Dockerfile
context: .
build-scan-container-op-batcher:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-batcher-${{ github.sha }}
file: op-batcher/Dockerfile
context: .
build-scan-container-op-proposer:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-proposer-${{ github.sha }}
file: op-proposer/Dockerfile
context: .
build-scan-container-proxyd:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-proxyd-${{ github.sha }}
file: proxyd/Dockerfile
context: .
build-scan-container-op-ufm:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-ufm-${{ github.sha }}
file: op-ufm/Dockerfile
context: .
build-args: OP_STACK_GO_BUILDER=us-west1-docker.pkg.dev/devopsre/dev-images/optimism/op-ci-builder:${{ inputs.sha }}
build-scan-container-ops-bedrock-l1:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-bedrock-l1-${{ github.sha }}
file: ops-bedrock/Dockerfile.l1
context: .
build-scan-container-ops-bedrock-l2:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-bedrock-l2-${{ github.sha }}
file: ops-bedrock/Dockerfile.l2
context: .
build-scan-container-ops-bedrock:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: ops-bedrock-${{ github.sha }}
file: ops-bedrock/Dockerfile.stateviz
context: .
build-scan-container-indexer:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-indexer-${{ github.sha }}
file: indexer/Dockerfile
context: .
build-scan-container-op-heartbeat:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-heartbeat-${{ github.sha }}
file: op-heartbeat/Dockerfile
context: .
build-scan-container-op-exporter:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-exporter-${{ github.sha }}
file: op-exporter/Dockerfile
context: .
build-scan-container-op-program:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-program-${{ github.sha }}
file: op-program/Dockerfile
context: .
build-scan-container-indexer-ui:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-indexer-ui-${{ github.sha }}
file: indexer/ui/Dockerfile
context: .
build-scan-container-op-challenger:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-challenger-${{ github.sha }}
file: op-challenger/Dockerfile
context: .
build-scan-container-endpoint-monitor:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-endpoint-monitor-${{ github.sha }}
file: endpoint-monitor/Dockerfile
context: .
build-scan-container-opwheel:
uses: celo-org/reusable-workflows/.github/workflows/[email protected]
needs: check-inputs
with:
workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-celo-monorepo/providers/github-by-repos
service-account: '[email protected]'
artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/optimism
tags: op-opwheel-${{ github.sha }}
file: op-wheel/Dockerfile
context: .