Merge pull request #27 from OpenVoxProject/prep_templating

ci: update sync.yml for templating

Author: lbetz

.sync.yml

@@ -1,15 +1,39 @@
 ---
-.github/workflows/ci.yml:
+:global:
   matrix_command: bash matrix.sh build
   matrix_requires_yq: true
-  build_job_name: 'Build ${{ matrix.platform }} CI container'
   build_runner: '${{ matrix.runner }}'
   image_tag: 'ci/openbolt:${{ matrix.rubygem_openbolt }}'
   build_platforms: 'linux/${{ matrix.platform }}'
   build_args:
     - 'BASE_IMAGE=${{ matrix.base_image }}'
     - 'RUBYGEM_BUNDLER=${{ matrix.rubygem_bundler }}'
     - 'RUBYGEM_OPENBOLT=${{ matrix.rubygem_openbolt }}'
+.github/workflows/ci.yml:
+  build_job_name: 'Build ${{ matrix.platform }} CI container'
   test_repository: voxpupuli/puppet-example
   test_commands:
     - 'docker run --rm -v "$PWD:/repo:Z" ci/openbolt:${{ matrix.rubygem_openbolt }} -h'
+.github/workflows/security_scanning.yml:
+  scan_job_name: 'Scan ${{ matrix.platform }} container'
+  sarif_category: 'grype-${{ matrix.platform }}'
+.github/workflows/build_container.yml:
+  publish_build_job_name: 'Build OpenBolt ${{ matrix.rubygem_openbolt }} (${{ matrix.platform }})'
+  publish_build_arch: 'linux/${{ matrix.platform }}'
+  publish_tags:
+    - 'ghcr.io/openvoxproject/openbolt:${{ github.sha }}-v${{ matrix.rubygem_openbolt }}-${{ matrix.platform }}'
+  publish_manifest_matrix_command: bash matrix.sh tag
+  publish_manifest_steps:
+    - name: Create multi-architecture manifests
+      commands:
+        - >-
+          docker buildx imagetools create
+          -t ghcr.io/openvoxproject/openbolt:${{ matrix.rubygem_openbolt }}-${{ github.ref_name }}
+          -t ghcr.io/openvoxproject/openbolt:${{ matrix.rubygem_openbolt }}-latest
+          -t ghcr.io/openvoxproject/openbolt:latest
+          -t docker.io/voxpupuli/openbolt:${{ matrix.rubygem_openbolt }}-${{ github.ref_name }}
+          -t docker.io/voxpupuli/openbolt:${{ matrix.rubygem_openbolt }}-latest
+          -t docker.io/voxpupuli/openbolt:latest
+          ghcr.io/openvoxproject/openbolt:${{ github.sha }}-v${{ matrix.rubygem_openbolt }}-arm64
+          ghcr.io/openvoxproject/openbolt:${{ github.sha }}-v${{ matrix.rubygem_openbolt }}-amd64
+  dockerhub_repository: voxpupuli/openbolt