ingest with kusari-uploader

Signed-off-by: Sunny Yip <[email protected]>

.github/workflows/test.yaml

@@ -0,0 +1,40 @@
+name: Build and Test
+
+on:
+  workflow_dispatch:
+  push:
+    # branches:
+    #   - main
+
+permissions:
+  contents: read
+  id-token: write
+
+jobs:
+
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
+
+      - name: clone guac-data
+        uses: actions/checkout@24cb9080177205b6e8c946b17badbe402adc938f # v3.4.0
+        with:
+          repository: 'guacsec/guac-data'
+          ref: 'main'
+          path: 'guac-data'
+
+      - name: ingest to guac
+        uses: ./
+        continue-on-error: true
+        with:
+          files: ./guac-data/docs
+          client-id: ${{ secrets.GUAC_CLIENT_ID }}
+          client-secret: ${{ secrets.GUAC_CLIENT_SECRET }}
+          tenant-api-endpoint: https://ingesttest.api.dev.kusari.cloud
+          auth-server-token-endpoint: https://auth.dev.kusari.cloud/oauth2/token
+
+      - name: last step
+        shell: bash
+        run: |
+          echo "This runs after GUAC ingestion"

Dockerfile

@@ -1,7 +1,9 @@
-FROM cgr.dev/chainguard/go AS builder
-COPY . /app
-RUN cd /app && go build -o guac-github-action .
+# FROM cgr.dev/chainguard/go AS builder
+# COPY . /app
+# RUN cd /app && go build -o guac-github-action .
 
-FROM cgr.dev/chainguard/glibc-dynamic
-COPY --from=builder /app/guac-github-action /usr/bin/
-ENTRYPOINT ["/usr/bin/guac-github-action"]
+# FROM cgr.dev/chainguard/glibc-dynamic
+# COPY --from=builder /app/guac-github-action /usr/bin/
+# ENTRYPOINT ["/usr/bin/guac-github-action"]
+
+FROM ghcr.io/kusaridev/kusari-uploader:latest

action.yaml

@@ -9,7 +9,7 @@ inputs:
   files:
     description: 'path to directory or specific file to ingest'
     required: true
-  gql-addr:
+  api-addr:
     description: 'endpoint for graphql api for GUAC'
     required: true
   token-url:
@@ -30,7 +30,7 @@ runs:
   image: 'Dockerfile'
   args:
     - ${{ inputs.files }}
-    - ${{ inputs.gql-addr }}
-    - ${{ inputs.token-url }}
     - ${{ inputs.client-id }}
     - ${{ inputs.client-secret }}
+    - ${{ inputs.api-addr }}
+    - ${{ inputs.token-url }}