pr-build.yml

name: build and validate
on:
  schedule:
    - cron: 20 1 * * 2
  push:
    branches:
      - main
  pull_request:
    branches:
      - main

jobs:
  build:
    runs-on: ubuntu-22.04
    steps:
       # Set fetch-depth: 0 to fetch commit history and tags for use in version calculation
      - name: Check out code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_READ_USER }}
          password: ${{ secrets.DOCKERHUB_READ_TOKEN }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Build with Gradle
        uses: hypertrace/github-actions/gradle@main
        with:
          args: dockerBuildImages

      - name: Run Trivy vulnerability scanner for mongo-curl image
        uses: hypertrace/github-actions/trivy-image-scan@main
        with:
          image: hypertrace/mongo-curl
          output-mode: github
          category: mongo-curl

  validate-helm-charts:
    runs-on: ubuntu-22.04
    steps:
      - name: Check out code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: validate charts
        uses: hypertrace/github-actions/validate-charts@main
        with:
          extra-args: --set persistence.subPath=mongodb