CI/CD bilan integratsiya

FROM alpine:3.21 AS asos
COPY ilova.sh /ilova.sh
ENV DOKON_VERSIYA=1.0

FROM asos AS sinov
COPY sinov.sh /sinov.sh
RUN /sinov.sh

FROM asos AS yakuniy
CMD ["/ilova.sh"]

docker build -q --target sinov -t ci-sinov:1 . >/dev/null \
    && echo "test bosqichi o'tdi"

sed -i 's/Dokon 1.0/Dokon 9.9/' sinov.sh
docker build --target sinov -t ci-sinov:2 . >/tmp/b.log 2>&1
echo "qurish chiqish kodi: $?"
grep -E 'TEST XATO|ERROR: process' /tmp/b.log | head -2 | fold -sw 74

sed -i 's/Dokon 9.9/Dokon 1.0/' sinov.sh
docker build -q --target yakuniy -t ci-ilova:1.0 . >/dev/null
docker run --rm ci-ilova:1.0

name: Qurish va nashr

on:
  push:
    branches: [main]
    tags: ["v*"]

jobs:
  qurish:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - uses: docker/setup-buildx-action@v3

      - uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Testlar
        uses: docker/build-push-action@v6
        with:
          target: sinov
          push: false
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Zaifliklarni skanerlash
        uses: aquasecurity/trivy-action@master
        with:
          image-ref: ghcr.io/${{ github.repository }}:sinov
          severity: CRITICAL,HIGH
          exit-code: "1"

      - name: Qurish va nashr
        id: nashr
        uses: docker/build-push-action@v6
        with:
          target: yakuniy
          push: true
          tags: |
            ghcr.io/${{ github.repository }}:sha-${{ github.sha }}
            ghcr.io/${{ github.repository }}:latest
          labels: |
            org.opencontainers.image.revision=${{ github.sha }}
          cache-from: type=gha
          cache-to: type=gha,mode=max

      - name: Digestni chiqarish
        run: echo "Digest ${{ steps.nashr.outputs.digest }}"

docker buildx version
docker buildx ls --format '{{.Name}}' | head -2

name: Yetkazish

on:
  workflow_run:
    workflows: ["Qurish va nashr"]
    types: [completed]

jobs:
  yetkazish:
    runs-on: ubuntu-latest
    if: ${{ github.event.workflow_run.conclusion == 'success' }}
    steps:
      - name: Serverga ulanib yangilash
        uses: appleboy/ssh-action@v1
        with:
          host: ${{ secrets.SERVER }}
          username: ${{ secrets.SSH_USER }}
          key: ${{ secrets.SSH_KEY }}
          script: |
            cd /srv/dokon
            docker compose pull
            docker compose up -d --wait
            docker image prune -f