docs: note merge-train/spartan-v6 → v6-next in the base-branch table … #451
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build Private Fuzzing Container | |
| on: | |
| push: | |
| branches: | |
| - next | |
| workflow_dispatch: | |
| inputs: | |
| commit: | |
| description: "Git commit SHA to build (leave empty for latest)" | |
| required: false | |
| default: "" | |
| jobs: | |
| build: | |
| if: github.repository == 'AztecProtocol/aztec-packages-private' | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| id-token: write | |
| steps: | |
| - uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1 | |
| - name: Free up disk space on runner | |
| uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be | |
| with: | |
| large-packages: false | |
| - name: Log in to GitHub Container Registry | |
| uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build and push | |
| id: build | |
| uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0 | |
| with: | |
| context: container-builds/fuzzing-container/src/ | |
| file: container-builds/fuzzing-container/src/Dockerfile.private | |
| push: true | |
| tags: | | |
| ghcr.io/aztecprotocol/fuzzing-container-private:latest | |
| ghcr.io/aztecprotocol/fuzzing-container-private:${{ github.sha }} | |
| build-args: | | |
| COMMIT=${{ github.event_name == 'workflow_dispatch' && github.event.inputs.commit || github.sha }} | |
| BRANCH=${{ github.ref_name }} | |
| REPO=${{ github.repository }} | |
| secrets: | | |
| github_token=${{ secrets.GITHUB_TOKEN }} | |
| labels: | | |
| org.opencontainers.image.source=https://github.com/${{ github.repository }} | |
| org.opencontainers.image.revision=${{ github.sha }} | |
| org.opencontainers.image.revision.branch=${{ github.ref_name }} | |
| com.aztec.visibility=private | |
| - name: Install oras | |
| uses: oras-project/setup-oras@38de303aac69abb66f3e6255b7198bff35f323e3 # v2.0.0 | |
| - name: Extract and attach fuzzer manifest | |
| run: | | |
| docker create --name manifest-extract ghcr.io/aztecprotocol/fuzzing-container-private:${{ github.sha }} | |
| docker cp manifest-extract:/home/fuzzer/aztec-packages/barretenberg/cpp/fuzzer_manifest.json ./fuzzer_manifest.json | |
| docker rm manifest-extract | |
| oras attach ghcr.io/aztecprotocol/fuzzing-container-private@${{ steps.build.outputs.digest }} \ | |
| --artifact-type application/vnd.contfuzzer.manifest+json \ | |
| fuzzer_manifest.json | |
| - name: Install cosign | |
| uses: sigstore/cosign-installer@ba7bc0a3fef59531c69a25acd34668d6d3fe6f22 # v4.1.0 | |
| with: | |
| cosign-release: 'v3.0.5' | |
| - name: Sign image | |
| run: | | |
| cosign sign --yes --tlog-upload=false \ | |
| ghcr.io/aztecprotocol/fuzzing-container-private@${{ steps.build.outputs.digest }} |