migrate to gha

.github/rvu/labels.yaml

@@ -0,0 +1 @@
+service.rvu.co.uk/brand: airship

.github/workflows/push.yaml

@@ -0,0 +1,58 @@
+name: push
+on: push
+permissions:
+    contents: read
+    id-token: write
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.15"
+      - run: go test -v -cover $(shell go list ./... | grep -v /vendor)
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.15"
+      - run: CGO_ENABLED=0 GOOS=linux go build -o bin/aws-sigv4-proxy
+      - uses: actions/upload-artifact@v4
+        with:
+          name: bin
+          path: bin/
+  docker-latest:
+    needs:
+      - test
+      - build
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: aws-actions/configure-aws-credentials@v4
+        with:
+          aws-region: ${{ vars.AWS_REGION }}
+          role-to-assume: ${{ vars.AWS_ECR_IAM_ROLE }}
+      - uses: aws-actions/amazon-ecr-login@v2
+        with:
+          mask-password: "true"
+      - uses: actions/download-artifact@v4
+        with:
+          name: bin
+          path: bin/
+      - id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ vars.IMAGE_NAME_DEFAULT }}
+          tags: |
+            type=semver,pattern={{raw}}
+            type=sha,prefix=,format=long,
+      - uses: docker/build-push-action@v5
+        with:
+          context: .
+          labels: ${{ steps.meta.outputs.labels }}
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+

Dockerfile

@@ -1,26 +1,4 @@
-FROM amazonlinux:latest AS build
-
-RUN yum -y update && rm -rf /var/cache/yum/*
-RUN yum install -y  \
-      ca-certificates \
-      git \
-      bash \
-      go
-
-RUN mkdir /aws-sigv4-proxy
-WORKDIR /aws-sigv4-proxy
-COPY go.mod .
-COPY go.sum .
-
-RUN go env -w GOPROXY=direct
-RUN go mod download
-COPY . .
-
-RUN CGO_ENABLED=0 GOOS=linux go build -o /go/bin/aws-sigv4-proxy
-
-FROM alpine:3.7
-COPY --from=build /etc/ssl/certs/ca-bundle.crt /etc/ssl/certs/
-COPY --from=build /go/bin/aws-sigv4-proxy /go/bin/aws-sigv4-proxy
+FROM gcr.io/distroless/static:nonroot
 COPY entrypoint.sh /entrypoint.sh
 
 ENTRYPOINT ["/entrypoint.sh"]