release.yml

name: Release app
on:
  push:
    branches:
      - main

env:
  APP_NAME: goapp

jobs:
  test-code:
    runs-on: ubuntu-latest
    steps:
      - name: Set up Go
        uses: actions/setup-go@v4

      - name: Check out code
        uses: actions/checkout@v3

      - name: Test the app
        run: go test -v ./...

  build-and-push:
    name: Building the app and push to dev
    runs-on: ubuntu-latest
    steps:
        - name: Check out code
          uses: actions/checkout@v3

        - name: Build Image
          id: build-image
          uses: redhat-actions/buildah-build@v2
          with:
            image: goapp
            tags: dev-${{ github.sha }}
            containerfiles: |
              ./Dockerfile

        - name: Push To Registry
          uses: redhat-actions/push-to-registry@v2
          with:
            image: ${{ steps.build-image.outputs.image }}
            tags: ${{ steps.build-image.outputs.tags }}
            registry: docker.io/gmontalvoy
            username: ${{ secrets.DOCKER_HUB_USERNAME }}
            password: ${{ secrets.DOCKER_HUB_PASSWORD }}
      

  compliance:
    name: Image Scan
    needs: [ test-code, build-and-push ]
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@v3

      - name: Run Image Scan
        uses: aquasecurity/trivy-action@0.15.0
        with:
          image-ref: 'docker.io/gmontalvoy/goapp:dev-${{ github.sha }}'

  push-to-prod:
    name: Promote to prod
    needs: [ compliance]
    runs-on: ubuntu-latest
    steps:
      - name: promote to prod
        uses: redhat-actions/push-to-registry@v2
        with:
          image: ${{ env.APP_NAME }}
          tags: prod-${{ github.sha }}
          registry: docker.io/gmontalvoy
          username: ${{ secrets.DOCKER_HUB_USERNAME }}
          password: ${{ secrets.DOCKER_HUB_PASSWORD }}