pr-merged.yaml

name: build
on:
  pull_request_target:
    types: [closed]
    branches:
    - 'main'
    paths-ignore:
      - '**.md' ### Ignore running when README.MD changed.
      - '.github/workflows/*' ### Ignore running when files under path: .github/workflows/* changed.
  workflow_dispatch:

jobs:
  pr-merged:
    if: ${{ github.event.pull_request.merged == true || github.event_name == 'workflow_dispatch' }}
    permissions:
      actions: write
      id-token: write
      packages: write
      contents: write
      pull-requests: read
      attestations: write  # required by actions/attest-build-provenance in the shared workflow
    uses: kubescape/workflows/.github/workflows/incluster-comp-pr-merged.yaml@main
    with:
      IMAGE_NAME: quay.io/${{ github.repository_owner }}/storage
      IMAGE_TAG: v0.0.${{ github.run_number }}
      COMPONENT_NAME: storage
      CGO_ENABLED: 0
      GO111MODULE: "on"
      BUILD_PLATFORM: linux/amd64,linux/arm64
      GO_VERSION: "1.25"
      REQUIRED_TESTS: '[
                        "relevantCVEs",
                        "relevancy_enabled_stop_sniffing",
                        "relevant_data_is_appended",
                        "relevancy_large_image",
                        "relevancy_fix_vuln",
                        "relevancy_python",
                        "relevancy_golang",
                        "relevancy_java",
                        "relevancy_java_and_python",
                        "relevancy_golang_dynamic",
                        "network_policy",
                        "network_policy_data_appended",
                        "network_policy_pod_restarted",
                        "network_policy_multiple_replicas",
                        "network_policy_known_servers"
                      ]'
      COSIGN: true
      HELM_E2E_TEST: true
      FORCE: true
    secrets: inherit