bump_images.yml

name: Bump images

on:
  schedule:
    - cron: "0 6 * * *"
  # Allow to run this workflow manually
  workflow_dispatch:

permissions:
  contents: write

jobs:
  bump-chainguard-images:
    runs-on: ubuntu-latest
    steps:
      - name: bump nginx image
        uses: digitalservicebund/bump-chainguard-digest@da9b2679ad3b4fadc7fc9490c05d7c08cab59a60 # v1.0.0
        with:
          image_name: nginx
          file_path: frontend/Dockerfile.prod
          github_token: ${{ github.token }}
      - name: bump redis image
        uses: digitalservicebund/bump-chainguard-digest@da9b2679ad3b4fadc7fc9490c05d7c08cab59a60 # v1.0.0
        with:
          image_name: redis
          file_path: compose.yaml
          github_token: ${{ github.token }}

  trigger-pipeline:
    needs: bump-chainguard-images
    runs-on: ubuntu-latest
    permissions:
      actions: write
      contents: write
    steps:
      - name: Checkout repository
        uses: actions/checkout@v4
      - run: gh workflow run pipeline.yml
        env:
          GH_TOKEN: ${{ github.token }}