Migrate to github actions (#163)

jesusfcr · web-flow · commit 186d1d866d69 · 2025-04-02T18:33:49.000+02:00
diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
@@ -0,0 +1,72 @@
+name: Go Build & Test
+on:
+  push:
+    branches:
+      - master
+    tags:
+      - '**'
+  pull_request:
+  workflow_dispatch:
+
+jobs:
+  build-and-test:
+    runs-on: ubuntu-latest
+
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
+      cancel-in-progress: true
+
+    env:
+      FLYWAY_VERSION: "10.10.0"
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        if: github.event_name != 'pull_request'
+        with:
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version: stable
+
+      - name: Build and run tests
+        run: |
+          _script/start-pg
+          go test -tags integration $(go list ./... | grep -v /vendor/) ./test
+          cd local_deployment
+          ./test-local-deployment.sh
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            docker.io/${{ github.repository }}
+          tags: |
+            type=edge
+            type=ref,event=branch
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=sha
+
+      - name: Build and push
+        uses: docker/build-push-action@v6
+        with:
+          build-args: FLYWAY_VERSION=${{ env.FLYWAY_VERSION }}
+          platforms: linux/amd64,linux/arm64
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
diff --git a/.travis.yml b/.travis.yml
diff --git a/Dockerfile b/Dockerfile
@@ -1,6 +1,6 @@
 # Copyright 2020 Adevinta
 
-FROM --platform=$BUILDPLATFORM golang:1.22-alpine3.18 as builder
+FROM --platform=$BUILDPLATFORM golang:1.24-alpine AS builder
 
 WORKDIR /app
 
@@ -13,7 +13,7 @@ COPY . .
 
 ARG TARGETOS TARGETARCH
 
-RUN cd cmd/vulnerability-db-consumer/ && GOOS=$TARGETOS GOARCH=$TARGETARCH go build . && cd -
+RUN GOOS=$TARGETOS GOARCH=$TARGETARCH go build ./cmd/vulnerability-db-consumer
 
 FROM alpine:3.21
 
@@ -26,21 +26,15 @@ ARG FLYWAY_VERSION=10.10.0
 RUN wget -q https://repo1.maven.org/maven2/org/flywaydb/flyway-commandline/${FLYWAY_VERSION}/flyway-commandline-${FLYWAY_VERSION}.tar.gz \
     && tar -xzf flyway-commandline-${FLYWAY_VERSION}.tar.gz --strip 1 \
     && rm flyway-commandline-${FLYWAY_VERSION}.tar.gz \
-    && find ./drivers/ -type f | grep -Ev '(postgres|jackson)' | xargs rm \
+    && find ./drivers/ -type f -not -name '*postgres*' -not -name '*jackson*' -delete \
     && chown -R root:root . \
     && ln -s /flyway/flyway /bin/flyway
 
 WORKDIR /app
 
-ARG BUILD_RFC3339="1970-01-01T00:00:00Z"
-ARG COMMIT="local"
-
-ENV BUILD_RFC3339 "$BUILD_RFC3339"
-ENV COMMIT "$COMMIT"
-
 COPY db/sql/*.sql /app/sql/
 
-COPY --from=builder /app/cmd/vulnerability-db-consumer/vulnerability-db-consumer .
+COPY --from=builder /app/vulnerability-db-consumer .
 
 COPY config.toml .
 COPY run.sh .
diff --git a/README.md b/README.md
@@ -24,7 +24,7 @@ application.
 cd local_deployment
 
 # Start the dependencies
-docker-compose up -d
+docker compose up -d
 
 # Build and run the vulnerability-db-consumer
 ./start.sh
@@ -51,7 +51,7 @@ AWS_ACCESS_KEY_ID=fake AWS_SECRET_ACCESS_KEY=fake aws sns publish \
 
 To stop the dependencies, run:
 ```bash
-docker-compose down --remove-orphans
+docker compose down --remove-orphans
 ```
 
 To purge local mocked SQS queue:
diff --git a/_script/start-pg b/_script/start-pg
@@ -4,8 +4,8 @@
 
 set -e 
 
-docker run --name postgres -p 5432:5432 -e POSTGRES_USER=vulndb_test -e POSTGRES_PASSWORD=vulndb_test --rm -d postgres:13.3-alpine
+docker run -q --name postgres -p 5432:5432 -e POSTGRES_USER=vulndb_test -e POSTGRES_PASSWORD=vulndb_test --rm -d postgres:13.3-alpine
 
 sleep 2
 
-while ! docker exec -it postgres pg_isready; do echo "Waiting for postgres" && sleep 2; done;
+while ! docker exec postgres pg_isready; do echo "Waiting for postgres" && sleep 2; done;
diff --git a/_script/test_local b/_script/test_local
@@ -8,7 +8,7 @@ host=localhost
 port=5432
 
 # setup test db
-docker-compose -f $(pwd)/test/docker-compose.yml up -d
+docker compose -f $(pwd)/test/docker-compose.yml up --quiet-pull -d
 
 echo Waiting for postgres to become available...
 while ! nc -z $host $port 2>/dev/null
diff --git a/db/flyway-migrate.sh b/db/flyway-migrate.sh
@@ -2,5 +2,5 @@
 
 # Copyright 2020 Adevinta
 
-docker run --net=host -v "$PWD"/sql:/flyway/sql flyway/flyway:"${FLYWAY_VERSION:-10}-alpine" \
+docker run -q --net=host -v "$PWD"/sql:/flyway/sql flyway/flyway:"${FLYWAY_VERSION:-10}-alpine" \
     -user=vulndb -password=vulndb -url=jdbc:postgresql://localhost:5438/vulndb -baselineOnMigrate=true migrate
diff --git a/db/postgres-start.sh b/db/postgres-start.sh
@@ -2,4 +2,4 @@
 
 # Copyright 2020 Adevinta
 
-docker-compose up -d
+docker compose up -d --quiet-pull
diff --git a/db/postgres-stop.sh b/db/postgres-stop.sh
@@ -2,5 +2,5 @@
 
 # Copyright 2020 Adevinta
 
-docker-compose kill
-docker-compose rm -f
+docker compose kill
+docker compose rm -f
diff --git a/local_deployment/docker-compose.yml b/local_deployment/docker-compose.yml
@@ -14,7 +14,7 @@ services:
       - ./mocked_database/config.env
 
   mocked_sns_sqs:
-    image: pafortin/goaws:v0.3.1
+    image: admiralpiett/goaws:v0.5.3
     ports:
       - 4100:4100
     volumes:
diff --git a/local_deployment/test-local-deployment.sh b/local_deployment/test-local-deployment.sh
@@ -1,12 +1,12 @@
 #!/bin/bash
 
-docker-compose up -d 
+docker compose up -d --quiet-pull
 
 sleep 5
 
 ./start.sh & 
 
-AWS_ACCESS_KEY_ID=fake AWS_SECRET_ACCESS_KEY=fake aws sns publish --region local --endpoint-url http://localhost:4100 --topic-arn arn:aws:sns:local:012345678900:VulcanLocalhostChecks --message \
+docker run -q --rm -e AWS_ACCESS_KEY_ID=fake -e AWS_SECRET_ACCESS_KEY=fake --network=host amazon/aws-cli:2.25.2 sns publish --region local --endpoint-url http://localhost:4100 --topic-arn arn:aws:sns:local:012345678900:VulcanLocalhostChecks --message \
         '{
             "status":"FINISHED",
             "id":"old-model-happy-path-01",

Original file line number	Diff line number	Diff line change
`@@ -2,4 +2,4 @@`
`2`	`2`
`3`	`3`	`# Copyright 2020 Adevinta`
`4`	`4`
`5`		`-docker-compose up -d`
	`5`	`+docker compose up -d --quiet-pull`