pull_request.yaml

name: Push Multiarch Images
on:
  pull_request:
  push:
    branches:
      - main

jobs:
  build-and-push-arch-specifics:
    name: Build Rocks and Push Arch Specific Images
    uses: canonical/k8s-workflows/.github/workflows/build_rocks.yaml@main
    with:
      owner: ${{ github.repository_owner }}
      trivy-image-config: "trivy.yaml"
      multiarch-awareness: true
      cache-action: ${{ (github.event_name == 'push') && 'save' || 'restore' }}
      # pinning to use rockcraft 1.3.0 feature `entrypoint-service`
      rockcraft-revision: "1783"
      arch-skipping-maximize-build-space: '["arm64"]'
      platform-labels: '{"arm64": ["Ubuntu_ARM64_4C_16G_01"]}'
  scan-images:
    uses: canonical/k8s-workflows/.github/workflows/scan_images.yaml@main
    needs: [build-and-push-arch-specifics]
    secrets: inherit
    with:
      upload-result: ${{ github.event_name == 'push' }}
      images: ${{ needs.build-and-push-arch-specifics.outputs.images }}
      trivy-image-config: ./trivy.yaml
  build-and-push-multiarch-manifest:
    name: Combine Rocks and Push Multiarch Manifest
    uses: canonical/k8s-workflows/.github/workflows/assemble_multiarch_image.yaml@main
    needs: [build-and-push-arch-specifics]
    with:
      rock-metas: ${{ needs.build-and-push-arch-specifics.outputs.rock-metas }}
      dry-run: ${{ github.event_name != 'push' }}