Merge pull request 'Standardize 4-workflow CI pattern (align with opencode)' (#10 ) from fix/workflow-standard into main

Reviewed-on: #10
fix: separate hadolint ignores per-line (DL4006 on USER, DL3008 on RUN)
2026-06-14 16:26:17 -04:00 · 2026-06-14 15:22:59 -04:00 · 2026-06-14 15:22:16 -04:00 · 2026-06-14 15:20:58 -04:00 · 2026-06-14 15:19:59 -04:00 · 2026-06-14 13:02:14 -04:00
5 changed files with 43 additions and 43 deletions
@@ -7,14 +7,22 @@ on:
 jobs:
  hadolint:
    runs-on: ubuntu-latest
+    continue-on-error: true
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-        continue-on-error: true
        with:
          dockerfile: Dockerfile

+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+
  build-push:
+    needs: [test]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
@@ -34,8 +42,7 @@ jobs:
        with:
          images: jcabillot/opencode-openchamber
          tags: |
-            type=raw,value=latest
-            type=raw,value=${{ steps.get-latest-tag.outputs.tag }},enable=${{ steps.get-latest-tag.outputs.tag != '' }}
+            type=raw,value=${{ steps.get-latest-tag.outputs.tag }}-latest,enable=${{ steps.get-latest-tag.outputs.tag != '' }}
      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
        with:
          context: .
@@ -1,9 +1,7 @@
 name: Main Release
-
 on:
  push:
    branches: [main]
-
 jobs:
  hadolint:
    runs-on: ubuntu-latest
@@ -13,39 +11,21 @@ jobs:
        continue-on-error: true
        with:
          dockerfile: Dockerfile
-
-  build-push:
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
-      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
-      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
-        with:
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - id: meta
-        uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6
-        with:
-          images: jcabillot/opencode-openchamber
-          tags: |
-            type=raw,value=latest
-      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
-        with:
-          context: .
-          push: true
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          pull: true
-
  test:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
      - run: docker build -t ci-image:${{ github.sha }} .
-      - run: bash tests/test.sh ci-image:${{ github.sha }}
-
+  build:
+    needs: [test]
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t jcabillot/opencode-openchamber:${{ github.sha }} .
  tag:
+    needs: [build]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
@@ -53,10 +33,10 @@ jobs:
          fetch-depth: 0
      - name: Configure git auth
        run: |
-          git remote set-url origin "https://x-access-token:${{ secrets.GITHUB_TOKEN }}@scm.cabillot.eu/perso/opencode-openchamber.git"
+          git remote set-url origin "https://x-access-token:${{ secrets.SA_TOKEN_ACTION_PUSH_TAGS }}@scm.cabillot.eu/perso/opencode-openchamber.git"
      - uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          GITHUB_TOKEN: ${{ secrets.SA_TOKEN_ACTION_PUSH_TAGS }}
          DEFAULT_BUMP: patch
          RELEASE_BRANCHES: main
          WITH_V: true
@@ -1,9 +1,7 @@
 name: PR Checks
-
 on:
  pull_request:
    branches: [main]
-
 jobs:
  hadolint:
    runs-on: ubuntu-latest
@@ -19,5 +17,8 @@ jobs:
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - run: docker build -t ci-image:${{ github.sha }} .
-      - run: bash tests/test.sh ci-image:${{ github.sha }}
@@ -7,14 +7,22 @@ on:
 jobs:
  hadolint:
    runs-on: ubuntu-latest
+    continue-on-error: true
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
-        continue-on-error: true
        with:
          dockerfile: Dockerfile

+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
+      - uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4
+      - run: docker build -t ci-image:${{ github.sha }} .
+
  build-push:
+    needs: [test]
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6
@@ -29,6 +37,7 @@ jobs:
          images: jcabillot/opencode-openchamber
          tags: |
            type=ref,event=tag
+            type=ref,event=tag,suffix=-latest
      - uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
        with:
          context: .
@@ -1,3 +1,4 @@
+# hadolint ignore=DL3007
 FROM jcabillot/opencode:latest

 ARG OPENCHAMBER_WEB_VERSION=1.12.3
@@ -6,16 +7,18 @@ ENV NPM_CONFIG_UPDATE_NOTIFIER=false \
  NPM_CONFIG_LOGLEVEL=warn \
  NODE_ENV=production

+# hadolint ignore=DL4006
 USER root
-
-RUN rm -rf /tmp/* \
-  && apt-get update \
-  && apt-get install -y --no-install-recommends python3 make g++ \
+# hadolint ignore=DL3008
+RUN apt-get update \
+  && apt-get install -y --no-install-recommends \
+    python3 \
+    make \
+    g++ \
  && rm -rf /var/lib/apt/lists/* \
  && npm install -g --no-fund --no-audit "@openchamber/web@${OPENCHAMBER_WEB_VERSION}" \
  && npm cache clean --force \
-  && openchamber --version \
-  && chown -R opencode:opencode /home/opencode
+  && openchamber --version

 WORKDIR /home/opencode/
 USER opencode
Author	SHA1	Message	Date
jcabillot	797cea590a	Merge pull request 'Standardize 4-workflow CI pattern (align with opencode)' (#10 ) from fix/workflow-standard into main Main Release / hadolint (push) Successful in 6s Details Main Release / test (push) Successful in 2m22s Details Main Release / build (push) Successful in 14s Details Main Release / tag (push) Successful in 12s Details Tag Release / hadolint (push) Successful in 8s Details Tag Release / test (push) Successful in 11s Details Tag Release / build-push (push) Successful in 3m42s Details Reviewed-on: #10	2026-06-14 16:26:17 -04:00
cloudix_mcp_server	a8e2331f89	fix: separate hadolint ignores per-line (DL4006 on USER, DL3008 on RUN) PR Checks / hadolint (pull_request) Successful in 8s Details PR Checks / build-test (pull_request) Successful in 2m30s Details	2026-06-14 15:22:59 -04:00
cloudix_mcp_server	64ebfb04d6	fix: restore USER root with hadolint ignore (needed for apt in non-root base) PR Checks / hadolint (pull_request) Successful in 7s Details PR Checks / build-test (pull_request) Successful in 2m29s Details	2026-06-14 15:22:16 -04:00
cloudix_mcp_server	0576c5c680	fix: remove version pins, ignore DL3008 (incompatible with this base) PR Checks / hadolint (pull_request) Successful in 7s Details PR Checks / build-test (pull_request) Failing after 33s Details	2026-06-14 15:20:58 -04:00
cloudix_mcp_server	bcc349744e	fix: add Docker Hub login to avoid rate limiting on image pulls PR Checks / hadolint (pull_request) Successful in 7s Details PR Checks / build-test (pull_request) Failing after 16s Details	2026-06-14 15:19:59 -04:00
cloudix_mcp_server	7a2d6e865c	fix: ignore DL3007 for :latest (no specific tag available on Docker Hub) PR Checks / hadolint (pull_request) Successful in 7s Details PR Checks / build-test (pull_request) Failing after 28s Details	2026-06-14 13:02:14 -04:00
cloudix_mcp_server	9c278ee97b	fix: use :latest tag (build dep, not available as :1.16.2 yet) PR Checks / hadolint (pull_request) Failing after 5s Details PR Checks / build-test (pull_request) Failing after 27s Details	2026-06-14 12:40:45 -04:00
cloudix_mcp_server	8d1d7ac166	fix: resolve hadolint lint issues (pin versions, remove redundant USER root) PR Checks / hadolint (pull_request) Successful in 8s Details PR Checks / build-test (pull_request) Failing after 13s Details	2026-06-14 12:39:44 -04:00
cloudix_mcp_server	2f3838ecdd	fix: move continue-on-error to step level, remove from job level PR Checks / hadolint (pull_request) Failing after 6s Details PR Checks / build-test (pull_request) Successful in 11s Details	2026-06-13 20:32:44 -04:00
cloudix_mcp_server	82cc072a19	fix: rewrite pr.yaml without test.sh for opencode-openchamber PR Checks / build-test (pull_request) Successful in 3m30s Details PR Checks / hadolint (pull_request) Failing after 8s Details	2026-06-13 20:26:23 -04:00
cloudix_mcp_server	c30d014610	fix: rewrite tag.yaml without test.sh for opencode-openchamber	2026-06-13 20:26:19 -04:00
cloudix_mcp_server	3e966df299	fix: rewrite cron.yaml without test.sh for opencode-openchamber PR Checks / build-test (pull_request) Successful in 3m39s Details PR Checks / hadolint (pull_request) Failing after 6s Details	2026-06-13 20:26:11 -04:00
cloudix_mcp_server	63be8bbd24	fix: rewrite main.yaml with build job, SA_TOKEN_ACTION_PUSH_TAGS, no test.sh	2026-06-13 20:26:06 -04:00
cloudix_mcp_server	2d187bf47e	fix: correct checkout SHA and restructure tag.yaml per standard PR Checks / hadolint (pull_request) Failing after 6s Details PR Checks / build-test (pull_request) Successful in 18s Details	2026-06-13 19:06:40 -04:00
cloudix_mcp_server	7673d4da77	fix: correct checkout SHA and rename job to build-test PR Checks / hadolint (pull_request) Failing after 7s Details PR Checks / build-test (pull_request) Successful in 18s Details	2026-06-13 19:06:36 -04:00
cloudix_mcp_server	74d9b8c9b5	fix: correct checkout SHA and restructure main.yaml (no Docker push) PR Checks / hadolint (pull_request) Failing after 3s Details PR Checks / build (pull_request) Failing after 1s Details	2026-06-13 19:06:33 -04:00
cloudix_mcp_server	8c21f439c9	fix: correct checkout SHA and restructure cron.yaml per standard PR Checks / hadolint (pull_request) Failing after 2s Details PR Checks / build (pull_request) Failing after 2s Details	2026-06-13 19:06:29 -04:00
Sagent	d043929efc	feat: align 4-workflow pattern with opencode standard PR Checks / hadolint (pull_request) Failing after 9s Details PR Checks / build (pull_request) Failing after 10s Details	2026-06-13 21:25:38 +00:00