odis-signer-container.yml

---
name: Build ODIS signer image

on:
  push:
    paths:
      - 'dockerfiles/Dockerfile-signer'
      - 'apps/signer/**'
      - 'yarn.lock'
    branches:
      - main
      - 'prerelease/*'
    tags:
      - odis-signer-.*
  pull_request:
    paths:
      - 'dockerfiles/Dockerfile-signer'
      - 'apps/signer/**'
      - 'yarn.lock'
  workflow_dispatch:

jobs:
  odis-signer-build-dev:
    uses: celo-org/reusable-workflows/.github/workflows/container-cicd.yaml@v2.0.1
    name: Build us-west1-docker.pkg.dev/devopsre/dev-images/odis-signer
    if: |
      github.ref != 'refs/heads/main'
    with:
      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-social-connect/providers/github-by-repos
      service-account: 'social-connect-dev@devopsre.iam.gserviceaccount.com'
      artifact-registry: us-west1-docker.pkg.dev/devopsre/dev-images/odis-signer
      tags: ${{ github.sha }}
      context: .
      file: dockerfiles/Dockerfile-signer
      trivy: true

  odis-signer-build:
    uses: celo-org/reusable-workflows/.github/workflows/container-cicd.yaml@v2.0.1
    name: Build us-west1-docker.pkg.dev/devopsre/social-connect/odis-signer
    if: |
      github.ref == 'refs/heads/main'
    with:
      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-social-connect-main/providers/github-by-repos
      service-account: 'social-connect@devopsre.iam.gserviceaccount.com'
      artifact-registry: us-west1-docker.pkg.dev/devopsre/social-connect/odis-signer
      tags: ${{ github.sha }}
      context: .
      file: dockerfiles/Dockerfile-signer
      trivy: true

  odis-signer-tag:
    uses: celo-org/reusable-workflows/.github/workflows/container-cicd.yaml@v2.0.1
    name: Build us-west1-docker.pkg.dev/devopsre/social-connect/odis-signer tag
    if: |
      startsWith(github.ref, 'refs/tags/odis-signer-')
    with:
      workload-id-provider: projects/1094498259535/locations/global/workloadIdentityPools/gh-social-connect-tag/providers/github-by-repos
      service-account: 'social-connect@devopsre.iam.gserviceaccount.com'
      artifact-registry: us-west1-docker.pkg.dev/devopsre/social-connect/odis-signer
      tags: ${{ github.ref_name }}
      context: .
      file: dockerfiles/phone-number-privacy/Dockerfile-signer
      trivy: true