Skip to content

Update gha #3733

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
briehl wants to merge 3 commits into
base: develop
Choose a base branch
from
Open

Update gha #3733

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
97bc661
Merge pull request #3706 from kbase/develop
briehl Aug 14, 2025
cfb1741
update GHA to use inherited github info
briehl Jul 15, 2026
f0bc4ce
move rest of workflows away from github secret tokens for pulling images
briehl Jul 16, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
9 changes: 6 additions & 3 deletions .github/workflows/build_and_push_image.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,9 @@
docker_build_image:
if: github.event.pull_request.draft == false
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
Comment on lines +16 to +18
steps:
-
name: Check out GitHub Repo
Expand Down Expand Up @@ -42,17 +45,17 @@
run: echo "date=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
-
name: Set up Docker Buildx
uses: docker/setup-buildx-action@master

Check failure on line 48 in .github/workflows/build_and_push_image.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Use full commit SHA hash for this dependency. 


See more on https://sonarcloud.io/project/issues?id=kbase_narrative&issues=AZ9sb1T1d3MjbLf-F23_&open=AZ9sb1T1d3MjbLf-F23_&pullRequest=3733
-
name: Log in to the Container registry
uses: docker/login-action@master

Check failure on line 51 in .github/workflows/build_and_push_image.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Use full commit SHA hash for this dependency. 


See more on https://sonarcloud.io/project/issues?id=kbase_narrative&issues=AZ9sb1T1d3MjbLf-F24A&open=AZ9sb1T1d3MjbLf-F24A&pullRequest=3733
with:
registry: ghcr.io
username: ${{ secrets.GHCR_USERNAME }}
password: ${{ secrets.GHCR_TOKEN }}
username: ${{ github.actor }}
password: ${{ github.token }}
Comment on lines +54 to +55
-
name: Build narrative image
uses: docker/build-push-action@master

Check failure on line 58 in .github/workflows/build_and_push_image.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Use full commit SHA hash for this dependency. 


See more on https://sonarcloud.io/project/issues?id=kbase_narrative&issues=AZ9sb1T1d3MjbLf-F24B&open=AZ9sb1T1d3MjbLf-F24B&pullRequest=3733
with:
context: .
file: ./Dockerfile
Expand All @@ -67,8 +70,8 @@
TAG='${{ github.ref }}'
-
name: Build version image
uses: docker/build-push-action@master

Check failure on line 73 in .github/workflows/build_and_push_image.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Use full commit SHA hash for this dependency. 


See more on https://sonarcloud.io/project/issues?id=kbase_narrative&issues=AZ9sb1T1d3MjbLf-F24C&open=AZ9sb1T1d3MjbLf-F24C&pullRequest=3733
if: ${{ github.base_ref }} == 'main' || ${{ github.base_ref }} == 'develop'
if: ${{ github.base_ref == 'main' || github.base_ref == 'develop' }}
with:
Comment on lines 72 to 75
context: .
push: true
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/integration_test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,11 +16,11 @@
steps:
-
name: Log in to the Container registry
uses: docker/login-action@master

Check failure on line 19 in .github/workflows/integration_test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Use full commit SHA hash for this dependency. 


See more on https://sonarcloud.io/project/issues?id=kbase_narrative&issues=AZ9s3UfLP8KAA_GNscyV&open=AZ9s3UfLP8KAA_GNscyV&pullRequest=3733
with:
registry: ghcr.io
username: ${{ secrets.GHCR_USERNAME }}
password: ${{ secrets.GHCR_TOKEN }}
username: ${{ github.actor }}
password: ${{ github.token }}
Comment on lines 19 to +23
Comment on lines 21 to +23
-
name: Repo checkout
uses: actions/checkout@master
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/tag_latest_image.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -19,11 +19,11 @@
uses: actions/checkout@master
-
name: Log in to the Container registry
uses: docker/login-action@master

Check failure on line 22 in .github/workflows/tag_latest_image.yaml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Use full commit SHA hash for this dependency. 


See more on https://sonarcloud.io/project/issues?id=kbase_narrative&issues=AZ9s3UdLP8KAA_GNscyS&open=AZ9s3UdLP8KAA_GNscyS&pullRequest=3733
with:
registry: ghcr.io
username: ${{ secrets.GHCR_USERNAME }}
password: ${{ secrets.GHCR_TOKEN }}
username: ${{ github.actor }}
password: ${{ github.token }}
Comment on lines 22 to +26
-
name: Set up environment
run: |
Expand Down
4 changes: 2 additions & 2 deletions .github/workflows/unit_test.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,11 +16,11 @@
steps:
-
name: Log in to the Container registry
uses: docker/login-action@master

Check failure on line 19 in .github/workflows/unit_test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Use full commit SHA hash for this dependency. 


See more on https://sonarcloud.io/project/issues?id=kbase_narrative&issues=AZ9s3UfDP8KAA_GNscyT&open=AZ9s3UfDP8KAA_GNscyT&pullRequest=3733
with:
registry: ghcr.io
username: ${{ secrets.GHCR_USERNAME }}
password: ${{ secrets.GHCR_TOKEN }}
username: ${{ github.actor }}
password: ${{ github.token }}
Comment on lines 19 to +23
Comment on lines 21 to +23
-
name: Repo checkout
uses: actions/checkout@master
Expand Down Expand Up @@ -76,7 +76,7 @@
-
name: Send to Codecov
id: send_to_codecov
uses: codecov/codecov-action@main

Check failure on line 79 in .github/workflows/unit_test.yml

View check run for this annotation

SonarQubeCloud / SonarCloud Code Analysis

Use full commit SHA hash for this dependency. 


See more on https://sonarcloud.io/project/issues?id=kbase_narrative&issues=AZ9s3UfDP8KAA_GNscyU&open=AZ9s3UfDP8KAA_GNscyU&pullRequest=3733
continue-on-error: true
with:
token: ${{ secrets.CODECOV_TOKEN }}
Expand Down
Loading