Create ci.yml

Author: jweiser

.github/workflows/ci.yml

@@ -0,0 +1,96 @@
+name: release-gtp2chebi-update ci
+
+on:
+    workflow_dispatch: 
+    pull_request:
+        types:
+            - opened
+            - synchronize 
+    push:
+        branches:
+            - main
+
+permissions:
+    id-token: write
+    contents: read
+
+jobs:
+    lint:
+        if: ${{ github.event_name == 'pull_request' || github.event_name == 'workflow_dispatch' }}
+        runs-on: ubuntu-latest
+        env:
+            REPO_DIR: /opt/release-gtp2chebi-update
+        steps:
+            - uses: actions/checkout@v4
+
+            - name: Run lint
+              run: |
+                docker build --build-arg REPO_DIR="$REPO_DIR" --target setup-env -t lint-image .
+                docker run --name lint-container lint-image
+            
+            - name: Display lint errors
+              if: failure()
+              run: |
+                docker cp lint-container:"$REPO_DIR"/lint.log .
+                while IFS= read -r LINT_MSG; do echo "::warning::${LINT_MSG}"; done < lint.log
+                exit 1
+
+    docker-build:
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/checkout@v4
+
+            - uses: docker/setup-buildx-action@v3
+            
+            - uses: docker/build-push-action@v5
+              with:
+                context: .
+                file: Dockerfile
+                tags: tmp-tag
+                outputs: type=docker,dest=/tmp/image.tar
+
+            - uses: actions/upload-artifact@v4
+              with:
+                name: image-artifact
+                path: /tmp/image.tar
+
+    docker-push:
+        if: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+        needs: docker-build
+        runs-on: ubuntu-latest
+        steps:
+            - uses: actions/download-artifact@v4
+              with:
+                name: image-artifact
+                path: /tmp
+
+            - id: get-hash
+              run: |
+                FULL_SHA=${{ github.sha }}
+                echo "SHORT_SHA=${FULL_SHA:0:7}" >> $GITHUB_OUTPUT
+            
+            - env:
+                AWS_REGION: us-east-1
+              uses: aws-actions/configure-aws-credentials@v4
+              with:
+                role-to-assume: ${{ vars.AWS_ROLE }}
+                aws-region: ${{ env.AWS_REGION }}
+    
+            - id: login-ecr
+              uses: aws-actions/amazon-ecr-login@v2
+              with:
+                registry-type: public
+
+            - env:
+                AWS_REGISTRY: ${{ steps.login-ecr.outputs.registry }}
+                AWS_REGISTRY_ALIAS: reactome
+                AWS_REPO: release-gtp2chebi-update
+                IMG_TAG: ${{ steps.get-hash.outputs.SHORT_SHA }}
+              run: |
+                AWS_URI=$AWS_REGISTRY/$AWS_REGISTRY_ALIAS/$AWS_REPO
+                docker load --input /tmp/image.tar
+                docker tag tmp-tag $AWS_URI:latest
+                docker push $AWS_URI:latest
+                docker tag $AWS_URI:latest $AWS_URI:$IMG_TAG
+                docker push $AWS_URI:$IMG_TAG
+