image-update.yaml

name: Update Images

on:
  pull_request:

permissions:
  contents: write
  pull-requests: write

jobs:
  update:
    if: startsWith(github.head_ref, 'renovate/')
    runs-on: "ubuntu-latest"
    timeout-minutes: 10
    name: Update Images

    steps:
      - name: Checkout repository
        uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
        with:
          ref: ${{ github.head_ref }}
          persist-credentials: false

      - name: Install Zarf
        uses: defenseunicorns/setup-zarf@main
        with:
          # renovate: datasource=github-tags depName=defenseunicorns/zarf versioning=semver
          version: v0.32.3

      - name: Iron Bank Login
        run: zarf tools registry login -u "${{secrets.IRON_BANK_ROBOT_USERNAME}}" -p "${{secrets.IRON_BANK_ROBOT_PASSWORD}}" registry1.dso.mil
        
      - name: Update Images
        uses: ./.github/actions/update-images

      - name: Commit changes
        run: |
          git config --global user.email "${{ github.actor }}@users.noreply.github.com"
          git config --global user.name "${{ github.actor }}"
          git add .
          git commit -m "chore: update images"

      - name: Push changes
        uses: ad-m/github-push-action@master
        with:
          github_token: ${{ secrets.PUSH_PAT }}
          branch: ${{ github.head_ref }}