Files
nate.lubitz 1d19b08b7e
Publish Action Image / build (push) Successful in 1m9s
add security scans
2026-06-05 17:02:41 +10:00

63 lines
1.8 KiB
YAML

name: "K8s YAML Generator"
description: "Builds a Docker image, pushes it to a private registry, generates Kubernetes YAML from a simplified YML file, and deploys it."
author: "Claude Code made this"
inputs:
image_name:
description: "Docker image name to build and push (e.g. my-app)"
required: true
image_tag:
description: "Docker image tag. If omitted, defaults to both 'latest' and the short commit SHA."
required: false
dockerfile:
description: "Path to Dockerfile"
required: false
default: "Dockerfile"
max_tags:
description: "Maximum number of SHA image tags to keep in the registry"
required: false
default: "5"
registry:
description: "Docker registry URL"
required: false
default: "registry.natelubitz.com"
registry_username:
description: "Registry username"
required: true
registry_password:
description: "Registry password"
required: true
kube_host:
description: "Kubernetes API server URL"
required: false
default: "192.168.1.20:16443"
kube_certificate:
description: "Base64 encoded Kubernetes CA certificate"
required: true
kube_token:
description: "Kubernetes service account token"
required: true
scan_image:
description: "Scan image for vulnerabilities before pushing"
required: false
default: "true"
scan_severity:
description: "Fail on these severity levels (UNKNOWN,LOW,MEDIUM,HIGH,CRITICAL)"
required: false
default: "HIGH,CRITICAL"
# outputs:
# output_file:
# description: "Path to the generated Kubernetes YAML file"
runs:
using: "docker"
image: "docker://registry.natelubitz.com/infra/kforge:latest"
# args:
# - ${{ inputs.input_file }}
# - ${{ inputs.output_file }}
# - ${{ inputs.auto_deploy }}