github-actions/.github/workflows/local-python-ci.yml at main · notdodo/github-actions · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
name: Auto Tagger CI (local repository)
on:
  push:
    branches:
      - main
    paths:
      - auto-tagger/**
  pull_request:
    paths:
      - auto-tagger/**
      - .github/workflows/local-python-ci.yml

concurrency:
  group: ghas-auto-tagger-ci-${{ github.ref }}
  cancel-in-progress: true

jobs:
  python-ci:
    permissions:
      contents: read
    uses: notdodo/github-actions/.github/workflows/python-ci.yml@python-ci-v0
    with:
      working-directory: auto-tagger

  build-docker-image:
    permissions:
      attestations: write
      contents: read
      id-token: write
      packages: write
      security-events: write
    if: ${{ github.event_name == 'pull_request' }}
    uses: notdodo/github-actions/.github/workflows/docker-build-and-push.yml@docker-build-and-push-v0
    with:
      image: notdodo/auto-tagger
      platforms: linux/amd64
      push: false
      registry: ghcr.io
      working-directory: ./auto-tagger
      egress-policy-allowlist: >
        dl-cdn.alpinelinux.org:443
        pypi.org:443
        files.pythonhosted.org:443
    secrets:
      registry-username: notdodo
      registry-password: ${{ secrets.GITHUB_TOKEN }}