main.yaml

name: Update Plugins-dev

on:
  push:
    branches: [ main ]
  workflow_dispatch:

# Checks if any concurrent jobs is already being executed for main and cancel it.
concurrency:
  group: ci-main
  cancel-in-progress: true

jobs:
  build-plugins-dev:
    uses: falcosecurity/plugins/.github/workflows/reusable_build_packages.yaml@main
    with:
      makecommand: make packages -j4
      suffix: dev
    secrets: inherit

  get-changed-plugins:
    uses: ./.github/workflows/reusable_get_changed_plugins.yaml
  
  build-rules-tool:
    needs: [get-changed-plugins]
    if: needs.get-changed-plugins.outputs.changed-plugins != '[]' && needs.get-changed-plugins.outputs.changed-plugins != ''
    uses: ./.github/workflows/reusable_build_rules_tool.yaml
    with:
      output: rules-checker
      repository: falcosecurity/rules
  
  validate-plugins:
    needs: [build-plugins-dev, get-changed-plugins, build-rules-tool]
    if: needs.get-changed-plugins.outputs.changed-plugins != '[]' && needs.get-changed-plugins.outputs.changed-plugins != ''
    strategy:
      fail-fast: false
      matrix:
        plugin: ${{ fromJson(needs.get-changed-plugins.outputs.changed-plugins) }}
    uses: ./.github/workflows/reusable_validate_plugins.yaml
    with:
      plugin: ${{ matrix.plugin }}
      falcoctl-version: 0.7.3
      falco-image: falcosecurity/falco-no-driver:0.37.1
      plugins-artifact: plugins-x86_64-dev.tar.gz
      rules-checker: ./rules-checker
      arch: x86_64
    
  publish-plugins-dev:
    needs: [build-plugins-dev, validate-plugins]
    uses: falcosecurity/plugins/.github/workflows/reusable_publish_packages.yaml@main
    with:
      suffix: dev
    secrets: inherit

  publish-oci-artifacts-dev:
    needs: [ build-plugins-dev, validate-plugins ]
    uses: ./.github/workflows/reusable-publish-oci-artifacts.yaml
    with:
      dev-tag: main
      suffix: dev
    secrets: inherit