GH-2138 Update Security.md (Resolve #2138) #718
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # GitHub Actions workflow to automatically publish snapshot builds. | |
| name: "Publish snapshots" | |
| on: | |
| push: | |
| branches: [ "main" ] | |
| env: | |
| JAVA_VERSION: 21 | |
| jobs: | |
| maven: | |
| name: "Maven" | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: "Checkout repository" | |
| uses: actions/checkout@v3 | |
| - name: "Fetch git tags" # Required for axion-release-plugin | |
| run: git fetch --tags --unshallow | |
| - name: "Set up Java ${{ env.JAVA_VERSION }}" | |
| uses: actions/setup-java@v3 | |
| with: | |
| java-version: "${{ env.JAVA_VERSION }}" | |
| distribution: "liberica" | |
| - name: "Grant execute permission for gradlew" | |
| run: chmod +x gradlew | |
| - name: "Gradle publish" | |
| uses: gradle/gradle-build-action@v2 | |
| with: | |
| arguments: "shadowJar publish" | |
| env: | |
| MAVEN_NAME: ${{ secrets.MAVEN_NAME }} | |
| MAVEN_TOKEN: ${{ secrets.MAVEN_TOKEN }} | |
| docker: | |
| name: "Docker" | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: "Checkout repository" | |
| uses: actions/checkout@v3 | |
| - name: "Fetch Git tags" # Required for axion-release-plugin | |
| run: git fetch --tags --unshallow | |
| - name: "Set up QEMU" | |
| uses: docker/setup-qemu-action@v2 | |
| - name: "Set up Docker Buildx" | |
| uses: docker/setup-buildx-action@v2 | |
| - name: "Login to DockerHub" | |
| uses: docker/login-action@v2 | |
| with: | |
| username: "${{ secrets.DOCKERHUB_USERNAME }}" | |
| password: "${{ secrets.DOCKERHUB_TOKEN }}" | |
| - name: "Login to GitHub Container Registry" | |
| uses: docker/login-action@v2 | |
| with: | |
| registry: ghcr.io | |
| username: "${{ github.repository_owner }}" | |
| password: "${{ secrets.GITHUB_TOKEN }}" | |
| - name: "Build and push" | |
| id: docker_build | |
| uses: docker/build-push-action@v3 | |
| with: | |
| context: . | |
| push: true | |
| tags: | | |
| dzikoysk/reposilite:nightly | |
| ghcr.io/dzikoysk/reposilite:nightly |