ci.yml

name: ci

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]
  workflow_dispatch:
    inputs:
      build_context:
        description: 'Build directory'
        required: true
jobs:
  # Job to run change detection
  changes:
    runs-on: ubuntu-latest
    outputs:
      # Expose matched filters as job 'images' output variable
      images: ${{ steps.filter.outputs.changes }}
    steps:
      - uses: actions/checkout@v4

      - name: Set context from workflow_dispatch
        if: github.event_name != 'workflow_dispatch'
        id: manual_filter
        run: |
          echo "changes={ ${{ inputs.build_context}}: '${{ inputs.build_context}}/**' }"
      - uses: dorny/paths-filter@v2
        if: github.event_name != 'workflow_dispatch'
        id: filter
        with:
          # Use context to get the branch where commits were pushed.
          # If there is only one long-lived branch (e.g. master),
          # you can specify it directly.
          # If it's not configured, the repository default branch is used.
          base: ${{ github.ref }}
          filters: |
            aws-cli: 'aws-cli/**'
            buildpack-deps/ubuntu/jammy: 'buildpack-deps/ubuntu/jammy/**'
            fpm: 'fpm/**'
            meshcmd: 'meshcmd/**'
            python/3.8/jammy: 'python/3.8/jammy/**'
            python/3.8/slim-jammy: 'python/3.8/slim-jammy/**'
            python/3.9/jammy: 'python/3.9/jammy/**'
            python/3.9/slim-jammy: 'python/3.9/slim-jammy/**'
            python/3.10/jammy: 'python/3.10/jammy/**'
            python/3.10/slim-jammy: 'python/3.10/slim-jammy/**'
            python/3.11/jammy: 'python/3.11/jammy/**'
            python/3.11/slim-jammy: 'python/3.11/slim-jammy/**'
            python/3.12/jammy: 'python/3.12/jammy/**'
            python/3.12/slim-jammy: 'python/3.12/slim-jammy/**'
            
  # Job to build and test each of the modified images
  build:
    needs: changes
    strategy:
      matrix:
        # Parse JSON array containing names of all filters matching any of changed files
        # e.g. ['image1', 'image2'] if both image folders contains changes
        image: ${{ fromJSON(needs.changes.outputs.images) }}
    if: ${{ needs.changes.outputs.images != '[]' && needs.changes.outputs.images != '' }}
    runs-on: ubuntu-latest
    defaults:
      run:
        working-directory: ${{ matrix.image }}
    steps:
      - uses: actions/checkout@v4

      - name: Check the Containerfile with hadolint
        run: |
          $(git rev-parse --show-toplevel)/bin/lint.sh
      
      - name: Install QEMU static binaries
        uses: docker/setup-qemu-action@v3
      
      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v3
      
      - name: Build locally for testing
        uses: docker/bake-action@v4
        with:
          workdir: ${{ matrix.image }}
          targets: local
          load: true

      - name: Run tests on the image with cinc-auditor
        run: |
          $(git rev-parse --show-toplevel)/bin/test.sh

      - name: Login to DockerHub
        if: github.event_name == 'push'
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.CONTAINER_REGISTRY_USERNAME }}
          password: ${{ secrets.CONTAINER_REGISTRY_PASSWORD }}

      - name: Build and push
        uses: docker/bake-action@v4
        with:
          workdir: ${{ matrix.image }}
          push: ${{ github.event_name != 'pull_request' }}

      - name: Get the image name
        if: github.event_name != 'pull_request'
        id: image_name
        run: |
          json_data="$(docker buildx bake local --print 2>/dev/null)"
          if echo "$json_data" | jq -e '.target.default.labels["dev.polymathrobotics.image.readme-filepath"]' > /dev/null; then
            image_name=$(echo $json_data | jq -r '.target."release-default".["dev.polymathrobotics.image.title"]')
            echo "image_name=$image_name" >> $GITHUB_ENV
          else
            echo "image_name=$(docker buildx bake --print 2>/dev/null | jq -r '.target.default.labels."org.opencontainers.image.title"')" >> $GITHUB_ENV
          fi

      - name: Get the image description
        if: github.event_name != 'pull_request'
        id: image_description
        run: |
          json_data="$(docker buildx bake local --print 2>/dev/null)"
          if echo "$json_data" | jq -e '.target.default.labels["dev.polymathrobotics.image.readme-filepath"]' > /dev/null; then
            image_description=$(echo $json_data | jq -r '.target."release-default".labels["dev.polymathrobotics.image.description"]')
            echo "image_description=$image_name" >> $GITHUB_ENV
          else
            echo "image_description=$(docker buildx bake --print 2>/dev/null | jq -r '.target.default.labels."org.opencontainers.image.description"')" >> $GITHUB_ENV
          fi

      - name: Get the image readme filepath
        if: github.event_name != 'pull_request'
        id: image_readme_filepath
        run: |
          # Check if .group.local.targets.default exists, and if it does, extract its value
          json_data="$(docker buildx bake local --print 2>/dev/null)"
          if echo "$json_data" | jq -e '.target.default.labels["dev.polymathrobotics.image.readme-filepath"]' > /dev/null; then
            readme_filepath=$(echo $json_data | jq -r '.target.default.labels["dev.polymathrobotics.image.readme-filepath"]')
            echo "image_readme_filepath=$readme_filepath" >> $GITHUB_ENV
          else
            echo "image_readme_filepath=${{ matrix.image }}/README.md" >> $GITHUB_ENV
          fi

      - name: Update Docker Hub Description
        if: github.event_name != 'pull_request'
        uses: peter-evans/dockerhub-description@v3
        with:
          username: ${{ secrets.CONTAINER_REGISTRY_USERNAME }}
          password: ${{ secrets.CONTAINER_DESCRIPTION_PASSWORD }}
          repository: boxcutter/${{ env.image_name }}
          short-description: ${{ env.image_description }}
          readme-filepath: ${{ env.image_readme_filepath }}