release.yml

name: Release app
on:
  push:
    branches:
      - main

env:
  APP_NAME: goapp
  REGISTRY: docker.io
  ORG: gmontalvoy

jobs:
  test-code:
    runs-on: ubuntu-latest
    steps:
      - name: Set up Go
        uses: actions/setup-go@v4
      - name: Check out code
        uses: actions/checkout@v3
      - name: Test the app
        run: go test -v ./...

  build-and-push:
    name: Building the app and push to dev
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@v3

      - name: Build Image
        id: build-image
        uses: redhat-actions/buildah-build@v2
        with:
          image: ${{ env.APP_NAME }}
          tags: ${{ github.sha }}-dev
          containerfiles: |
            ./Dockerfile

      - name: Push To Registry
        uses: redhat-actions/push-to-registry@v2
        with:
          image: ${{ steps.build-image.outputs.image }}
          tags: ${{ github.sha }}-dev
          registry: ${{ env.REGISTRY }}/${{ env.ORG }}
          username: ${{ secrets.DOCKER_HUB_USERNAME }}
          password: ${{ secrets.DOCKER_HUB_PASSWORD }}

  compliance:
    name: Image Scan
    needs: [test-code, build-and-push]
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@v3
      - name: Run Image Scan
        uses: aquasecurity/trivy-action@0.15.0
        with:
          image-ref: '${{ env.REGISTRY }}/${{ env.ORG }}/${{ env.APP_NAME }}:${{ github.sha }}-dev'

  push-to-prod:
    name: Promote to prod
    needs: [compliance]
    runs-on: ubuntu-latest
    steps:
      - name: Check out code
        uses: actions/checkout@v3

      - name: Log in to Docker Registry
        uses: docker/login-action@v1
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ secrets.DOCKER_HUB_USERNAME }}
          password: ${{ secrets.DOCKER_HUB_PASSWORD }}

      - name: Pull Dev Image
        run: docker pull ${{ env.REGISTRY }}/${{ env.ORG }}/${{ env.APP_NAME }}:${{ github.sha }}-dev

      - name: Tag Image as Prod
        run: docker tag ${{ env.REGISTRY }}/${{ env.ORG }}/${{ env.APP_NAME }}:${{ github.sha }}-dev ${{ env.REGISTRY }}/${{ env.ORG }}/${{ env.APP_NAME }}:${{ github.sha }}-prod

      - name: Push to Prod
        uses: redhat-actions/push-to-registry@v2
        with:
          image: ${{ env.APP_NAME }}
          tags: ${{ github.sha }}-prod
          registry: ${{ env.REGISTRY }}/${{ env.ORG }}
          username: ${{ secrets.DOCKER_HUB_USERNAME }}
          password: ${{ secrets.DOCKER_HUB_PASSWORD }}