Merge branch 'sberk42:master' into master

.github/workflows/build.yaml

@@ -0,0 +1,33 @@
+name: "build"
+
+on:
+  # the 1st condition
+  workflow_run:
+    workflows: ["re-release"]
+    branches: [master]
+    types:
+      - completed
+
+jobs:
+  build_linux:
+    permissions:
+      contents: write
+      packages: write
+
+    name: Build Go Binary
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        # build and publish in parallel: linux/386, linux/amd64, linux/arm64, windows/386, windows/amd64, darwin/amd64, darwin/arm64
+        goos: [linux]
+        goarch: [amd64, arm, arm64]
+    steps:
+    - uses: actions/checkout@v3
+    - uses: wangyoucao577/go-release-action@v1
+      with:
+        github_token: ${{ secrets.GITHUB_TOKEN }}
+        goos: ${{ matrix.goos }}
+        goarch: ${{ matrix.goarch }}
+        release_tag: latest
+        overwrite: true
+        extra_files: LICENSE README.md metrics.json metrics-lua.json

.github/workflows/cleanup-runs.yaml

@@ -0,0 +1,16 @@
+name: Cleanup Runs
+on: [push]
+
+jobs:
+  del_runs:
+    permissions:
+      actions: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Delete workflow runs
+        uses: Mattraks/delete-workflow-runs@v2
+        with:
+          token: ${{ github.token }}
+          repository: ${{ github.repository }}
+          retain_days: 7
+          keep_minimum_runs: 4

.github/workflows/container.yml

@@ -31,10 +31,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Lint Dockerfile
-        uses: hadolint/hadolint-action@v1.6.0
+        uses: hadolint/hadolint-action@v3.0.0
         with:
           dockerfile: Dockerfile
 
@@ -49,7 +49,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Tag Image
         id: tag_image
@@ -67,8 +67,8 @@ jobs:
 
           echo DOCKER_REPOSITORY=$DOCKER_REPOSITORY
           echo DOCKER_TAG=$DOCKER_TAG
-          echo '::set-output name=DOCKER_REPOSITORY::'$DOCKER_REPOSITORY
-          echo '::set-output name=DOCKER_TAG::'$DOCKER_TAG
+          echo "DOCKER_REPOSITORY=${DOCKER_REPOSITORY}" >> $GITHUB_OUTPUT
+          echo "DOCKER_TAG=${DOCKER_TAG}" >> $GITHUB_OUTPUT
 
   # Build and push image to GitHub Packages.
   # See also https://docs.docker.com/docker-hub/builds/
@@ -79,17 +79,17 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v2
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v2
 
       - name: Build Image
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v3
         with:
           build-args: REPO=${{ github.repository }}
           context: .
@@ -108,20 +108,20 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v1
+        uses: docker/setup-qemu-action@v2
 
       - name: Set up Docker Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v1
+        uses: docker/setup-buildx-action@v2
       
       - name: Log into registry
         run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
 
       - name: Build Runtime Image and Push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v3
         with:
           build-args: REPO=${{ github.repository }}
           context: .
@@ -148,7 +148,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v3
 
       - name: Run Trivy vulnerability scanner
         uses: aquasecurity/trivy-action@master
@@ -162,7 +162,7 @@ jobs:
           severity: 'MEDIUM,HIGH,CRITICAL'
           
       - name: Upload Trivy scan results to GitHub Security tab
-        uses: github/codeql-action/upload-sarif@v1
+        uses: github/codeql-action/upload-sarif@v2
         if: always() 
         with:
           sarif_file: 'trivy-results.sarif'

.github/workflows/re-release.yaml

@@ -0,0 +1,26 @@
+name: "re-release"
+
+on: 
+  push:
+    branches:
+      - master
+
+jobs:
+  re-release:
+    permissions:
+      contents: write
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v2
+
+      - name: Delete
+        uses: ame-yu/action-delete-latest-release@v2
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Release
+        uses: softprops/action-gh-release@v1
+        with:
+          name: latest
+          tag_name: latest