daily security update #434
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: | |
| daily security update | |
| on: | |
| workflow_dispatch: {} | |
| schedule: | |
| - cron: "5 4 * * *" | |
| jobs: | |
| check_for_updates: | |
| runs-on: ubuntu-latest | |
| outputs: | |
| check_result: ${{ steps.check_openatlas_container.outputs.check_result }} | |
| steps: | |
| - name: check OpenAtlas container | |
| id: check_openatlas_container | |
| run: | | |
| check_result="$(docker run --rm -u 0:0 --entrypoint /bin/bash ghcr.io/acdh-oeaw/openatlas/container-preview:${{ github.ref_name }} \ | |
| -c 'apt-get update >/dev/null; if [ $(apt list --upgradable 2>/dev/null | wc -l) != 1 ]; then echo -n need to upgrade; else echo -n everything fine ; fi')" | |
| echo "$check_result" | |
| echo "check_result=$check_result" >> $GITHUB_OUTPUT | |
| call_delploy: | |
| needs: [check_for_updates] | |
| if: needs.check_for_updates.outputs.check_result == 'need to upgrade' | |
| uses: ./.github/workflows/starter.yaml | |
| secrets: inherit |