Merge pull request #39 from tysg/ty/setup-qemu

Build arm64 image on GitHub Actions

Author: zamazan4ik

.github/workflows/main.yml

@@ -10,13 +10,15 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@v1
+    - name: Set up QEMU
+      uses: docker/setup-qemu-action@v1
     - name: Build
       env:
         REPO: ${{ github.repository }}
       shell: bash
       run: |
         echo "docker_repo=${{ env.REPO }}" >> $GITHUB_ENV
-        make build
+        make build && make build-arm64
     - name: Trivy vulnerability scanner
       uses: aquasecurity/[email protected]
       with:
@@ -26,26 +28,39 @@ jobs:
         ignore-unfixed: true
         vuln-type: 'os,library'
         severity: 'CRITICAL,HIGH'
+    - name: Trivy vulnerability scanner on arm64 image
+      uses: aquasecurity/[email protected]
+      with:
+        image-ref: '${{ env.docker_repo }}:latest-arm64'
+        format: 'table'
+        exit-code: '1'
+        ignore-unfixed: true
+        vuln-type: 'os,library'
+        severity: 'CRITICAL,HIGH'
   test:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v1
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
       - name: Build
         shell: bash
-        run: make build
+        run: make build && make build-arm64
       - name: Test
-        run: make test
+        run: make test 
   publish:
     needs: [scan, test]
     if: github.repository == 'rust-serverless/lambda-rust'
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v1
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
       - name: Build
         shell: bash
-        run: make build
+        run: make build && make build-arm64
       - name: Publish Latest
         shell: bash
         run: |
           echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
-          make publish
+          make publish && make publish-arm64

.github/workflows/release.yml

@@ -21,11 +21,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v1
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
       - name: Build
         shell: bash
-        run: make build
+        run: make build && make build-arm64
       - name: Publish
         shell: bash
         run: |
           echo "${{ secrets.DOCKER_PASSWORD }}" | docker login -u "${{ secrets.DOCKER_USERNAME }}" --password-stdin
-          make publish-tag
+          make publish-tag && make publish-tag-arm64

.github/workflows/untrusted.yml

@@ -9,6 +9,10 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v1
       - uses: actions/checkout@v1
+      - name: Build
+        run: make build && make build-arm64
       - name: Test
         run: make test