project-operator-all.yaml

name: project operator pipeline

on:
  push:
    branches:
      - main
    paths:
      - 'api/**.go'
      - 'config/**.go'
      - 'controllers/**.go'
      - '**.go'
      - 'go.mod'
      - 'go.sum'
      - 'Dockerfile'


jobs:
  
  buildDocker:
    runs-on: ubuntu-latest
    env:
      APP_NAME: djkormo-go-project-operator

    steps:
    - uses: actions/checkout@v2
      name: Checkout
      with:
        ref: main
      
    - name: Docker meta
      id: meta
      uses: docker/metadata-action@v3
      with:
      # list of Docker images to use as base name for tags
        images: |
          djkormo/go-project-operator
        # generate Docker tags based on the following events/attributes
        tags: |
          type=schedule
          type=ref,event=branch
          type=ref,event=pr
          type=semver,pattern={{version}}
          type=semver,pattern={{major}}.{{minor}}
          type=semver,pattern={{major}}
          type=sha
          
    - name: Login to DockerHub
      if: github.event_name != 'pull_request'
      uses: docker/login-action@v1 
      with:
        username: ${{ secrets.DOCKER_USERNAME }}
        password: ${{ secrets.DOCKER_PASSWORD }}
        
    - name: Build and push
      uses: docker/build-push-action@v2
      with:
        context: .
        push: ${{ github.event_name != 'pull_request' }}
        tags: ${{ steps.meta.outputs.tags }}
        labels: ${{ steps.meta.outputs.labels }}
      

    - name: Run Trivy vulnerability scanner
      uses: aquasecurity/trivy-action@master
      with:
        image-ref: djkormo/go-project-operator:main
        format: 'table'
        exit-code: '1'
        ignore-unfixed: true
        vuln-type: 'os,library'
        severity: 'CRITICAL,HIGH'