@@ -24,10 +24,10 @@ jobs:
2424 - name : Checkout repo
2525 uses : actions/checkout@v2
2626
27- - name : Install Node.js v12
27+ - name : Install Node.js v14
2828 uses : actions/setup-node@v2
2929 with :
30- node-version : " 12 "
30+ node-version : " 14 "
3131
3232 - name : Install helm
3333@@ -67,10 +67,10 @@ jobs:
6767 - name : Checkout repo
6868 uses : actions/checkout@v2
6969
70- - name : Install Node.js v12
70+ - name : Install Node.js v14
7171 uses : actions/setup-node@v2
7272 with :
73- node-version : " 12 "
73+ node-version : " 14 "
7474
7575 - name : Fetch dependencies from cache
7676 id : cache-yarn
@@ -96,10 +96,10 @@ jobs:
9696 with :
9797 fetch-depth : 0
9898
99- - name : Install Node.js v12
99+ - name : Install Node.js v14
100100 uses : actions/setup-node@v2
101101 with :
102- node-version : " 12 "
102+ node-version : " 14 "
103103
104104 - name : Fetch dependencies from cache
105105 id : cache-yarn
@@ -169,10 +169,10 @@ jobs:
169169 steps :
170170 - uses : actions/checkout@v2
171171
172- - name : Install Node.js v12
172+ - name : Install Node.js v14
173173 uses : actions/setup-node@v2
174174 with :
175- node-version : " 12 "
175+ node-version : " 14 "
176176
177177 - name : Install development tools
178178 run : |
@@ -244,10 +244,10 @@ jobs:
244244 steps :
245245 - uses : actions/checkout@v2
246246
247- - name : Install Node.js v12
247+ - name : Install Node.js v14
248248 uses : actions/setup-node@v2
249249 with :
250- node-version : " 12 "
250+ node-version : " 14 "
251251
252252 - name : Install nfpm
253253 run : |
@@ -270,8 +270,8 @@ jobs:
270270
271271 - name : Replace node with arm64 equivalent
272272 run : |
273- wget https://nodejs.org/dist/v12.18.4 /node-v12.18.4 -linux-arm64.tar.gz
274- tar -xzf node-v12.18.4 -linux-arm64.tar.gz node-v12.18.4 -linux-arm64/bin/node --strip-components=2
273+ wget https://nodejs.org/dist/v14.17.0 /node-v14.17.0 -linux-arm64.tar.xz
274+ tar -xf node-v14.17.0 -linux-arm64.tar.xz node-v14.17.0 -linux-arm64/bin/node --strip-components=2
275275 mv ./node ./release-standalone/lib/node
276276
277277 - name : Build packages with nfpm
@@ -290,10 +290,10 @@ jobs:
290290 steps :
291291 - uses : actions/checkout@v2
292292
293- - name : Install Node.js v12
293+ - name : Install Node.js v14
294294 uses : actions/setup-node@v2
295295 with :
296- node-version : " 12 "
296+ node-version : " 14 "
297297
298298 - name : Install nfpm
299299 run : |
@@ -333,10 +333,10 @@ jobs:
333333 steps :
334334 - uses : actions/checkout@v2
335335
336- - name : Install Node.js v12
336+ - name : Install Node.js v14
337337 uses : actions/setup-node@v2
338338 with :
339- node-version : " 12 "
339+ node-version : " 14 "
340340
341341 - name : Install playwright
342342 uses : microsoft/playwright-github-action@v1
@@ -386,9 +386,10 @@ jobs:
386386 - name : Remove release packages and test artifacts
387387 run : rm -rf ./release-packages ./test/test-results
388388
389- docker-amd64 :
389+ # Builds both amd64 and arm64 images
390+ docker-images :
390391 runs-on : ubuntu-latest
391- needs : package-linux-amd64
392+ needs : [ package-linux-amd64, package-linux-arm64]
392393 steps :
393394 - uses : actions/checkout@v2
394395
@@ -398,42 +399,24 @@ jobs:
398399 name : release-packages
399400 path : ./release-packages
400401
401- - name : Run ./ci/steps/build-docker-image.sh
402- run : ./ci/steps/build-docker-image.sh
402+ - name : Set up QEMU
403+ uses : docker/setup-qemu-action@v1
403404
404- - name : Upload release image
405- uses : actions/upload-artifact@v2
406- with :
407- name : release-images
408- path : ./release-images
409-
410- # TODO: this is the last place where we use our self-hosted arm64 runner.
411- # In the future, consider switching to docker buildx + qemu,
412- # thus removing the requirement for us to maintain the runner.
413- docker-arm64 :
414- runs-on : ubuntu-arm64-latest
415- needs : package-linux-arm64
416- steps :
417- - uses : actions/checkout@v2
418-
419- - name : Download release package
420- uses : actions/download-artifact@v2
421- with :
422- name : release-packages
423- path : ./release-packages
405+ - name : Set up Docker Buildx
406+ uses : docker/setup-buildx-action@v1
424407
425408 - name : Run ./ci/steps/build-docker-image.sh
426409 run : ./ci/steps/build-docker-image.sh
427410
428- - name : Upload release image
411+ - name : Upload release images
429412 uses : actions/upload-artifact@v2
430413 with :
431414 name : release-images
432415 path : ./release-images
433416
434417 trivy-scan-image :
435418 runs-on : ubuntu-20.04
436- needs : docker-amd64
419+ needs : docker-images
437420 # NOTE@jsjoeio: disabling due to a memory issue upstream
438421 # See: https://github.com/github/codeql-action/issues/528
439422 if : 1 == 2
@@ -449,7 +432,7 @@ jobs:
449432
450433 - name : Run Trivy vulnerability scanner in image mode
451434 # Commit SHA for v0.0.17
452- uses : aquasecurity/trivy-action@dba83feec810c70bacbc4bead308ae1e466c572b
435+ uses : aquasecurity/trivy-action@ac8de07fd168680dd0331bef43681c0e150e9ad1
453436 with :
454437 input : " ./release-images/code-server-amd64-*.tar"
455438 scan-type : " image"
@@ -466,6 +449,7 @@ jobs:
466449 uses : github/codeql-action/upload-sarif@v1
467450 with :
468451 sarif_file : " trivy-image-results.sarif"
452+
469453 # We have to use two trivy jobs
470454 # because GitHub only allows
471455 # codeql/upload-sarif action per job
@@ -476,7 +460,7 @@ jobs:
476460 uses : actions/checkout@v2
477461 - name : Run Trivy vulnerability scanner in repo mode
478462 # Commit SHA for v0.0.17
479- uses : aquasecurity/trivy-action@dba83feec810c70bacbc4bead308ae1e466c572b
463+ uses : aquasecurity/trivy-action@ac8de07fd168680dd0331bef43681c0e150e9ad1
480464 with :
481465 scan-type : " fs"
482466 scan-ref : " ."
0 commit comments