Update .github/workflows/.github-ci.yaml

Reviewed-on: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/richardrobertreitz/fibonacci_go/pulls/1

.github/workflows/.github-ci.yaml

@@ -1,33 +1,42 @@
-name: ci-workflow
+name: ci
- 
+
-on: [push]
+on:
+  push:
+  workflow_dispatch:
+
 jobs:
-  ci:
+  build:
-    runs-on: docker
+    runs-on: ubuntu-host
- 
+
-    container:
-      image: forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/pipeline-container/complete:v0.0.3
- 
     steps:
- 
+      -
-      - name: Clone Repository
+        name: Repository meta
-        uses: https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/DevFW-CICD/checkout@main
+        id: repository
- 
-      - name: Lint the Repository
         run: |
-          golangci-lint run ./... --out-format=json --timeout 10m --issues-exit-code 1
+          registry=${{ github.server_url }}
- 
+          registry=${registry##http*://}
-      - name: Build Credentials File
+          echo "registry=${registry}" >> "$GITHUB_OUTPUT"
-        run: |
+          echo "registry=${registry}"
-          mkdir -p ~/.docker
+          repository="$(echo "${{ github.repository }}" | tr '[:upper:]' '[:lower:]')"
-          AUTHSTRING=$(echo -n "${{ secrets.REGISTRY_USERNAME }}:${{ secrets.REGISTRY_PASSWORD }}" | base64 -w 0)
+          echo "repository=${repository}" >> "$GITHUB_OUTPUT"
-          echo "{\"auths\":{\"https://forgejo.edf-bootstrap.cx.fg1.ffm.osc.live\":{\"auth\":\"${AUTHSTRING}\"}}}" > ~/.docker/config.json
+          echo "repository=${repository}"
-      
+      -
-      - name: Build Docker Container
+        name: Docker meta
-        run: |
+        uses: docker/metadata-action@v5
-          KO_DOCKER_REPO="forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go" ko build --bare ./cmd
+        id: docker
- 
+        with:
-      - name: Vulnerability Scanning
+          images: ${{ steps.repository.outputs.registry }}/${{ steps.repository.outputs.repository }}
-        run: |
+      -
-          trivy image --scanners license,vuln,secret forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go:latest
+        name: Login to registry
-          trivy image --image-config-scanners secret,misconfig forgejo.edf-bootstrap.cx.fg1.ffm.osc.live/devfw-cicd/fibonacci_go:latest
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ steps.repository.outputs.registry }}
+          username: "${{ secrets.PACKAGES_USER }}"
+          password: "${{ secrets.PACKAGES_TOKEN }}"
+      -
+        name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          push: true
+          platforms: linux/amd64,linux/arm64
+          tags: ${{ steps.docker.outputs.tags }}

Dockerfile

@@ -5,6 +5,7 @@ COPY ./ ./
 
 # RUN go mod download
 
+RUN echo jojo
 RUN CGO_ENABLED=0 GOOS=linux go build -o fibonacci-go cmd/main.go
 
 # ToDo: use stretch as image for a completly empty container