build-iam-policy-json-to-terraform.yml

---
# This workflow uses actions that are not certified by GitHub. They are provided
# by a third-party and are governed by separate terms of service, privacy
# policy, and support documentation.

################################################################################
# DO NOT EDIT THIS FILE!
# 
# 1. Edit the *.gotmpl.yml files instead.
# 2. go run generate-workflow.go -t _download-and-package.gotmpl.yml -p iam-policy-json-to-terraform -r 'flosell/iam-policy-json-to-terraform' -c '50 9 * * *'
################################################################################

name: "📦 Build iam-policy-json-to-terraform"
on:
  workflow_dispatch:
  push:
    branches: [main]
    paths:
      - ".github/workflows/build-iam-policy-json-to-terraform.yml"
      - "packages/iam-policy-json-to-terraform/**"
  pull_request:
    branches: [main]
    paths:
      - ".github/workflows/build-iam-policy-json-to-terraform.yml"
      - "packages/iam-policy-json-to-terraform/**"
  schedule:
    - cron: '50 9 * * *'

defaults:
  run:
    shell: bash

env:
  DOCKER_BUILDKIT: 1
  REGISTRY: ${{ vars.REGISTRY }}

permissions: read-all

jobs:
  lookup:
    runs-on: ubuntu-latest
    name: Lookup current version
    permissions:
      packages: write
      contents: read
    strategy:
      fail-fast: false

    container:
      image: ghcr.io/northwood-labs/package-builder/ubuntu-v22.04:latest
      credentials:
        username: ${{ github.actor }}
        password: ${{ secrets.GITHUB_TOKEN }}

    outputs:
      cache_hit: ${{ steps.check.outputs.cache-hit }}
      package_version: ${{ steps.lookup_version.outputs.package_version }}

    steps:
      - name: Lookup latest version of package
        id: lookup_version
        env:
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          echo "package_version=$(download-asset latest-tag -r 'flosell/iam-policy-json-to-terraform' -s)" >> $GITHUB_OUTPUT

      - name: Check to see if we've already built this version
        uses: actions/cache/restore@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
        id: check
        with:
          key: "iam-policy-json-to-terraform-${{ steps.lookup_version.outputs.package_version }}"
          path: "packages/iam-policy-json-to-terraform/dist"
          lookup-only: true

  build:
    if: needs.lookup.outputs.cache_hit != 'true'
    needs: lookup
    name: "📦 Build and cache"
    uses: northwood-labs/package-building/.github/workflows/_build-and-cache.yml@main
    secrets: inherit
    with:
      package-name: "iam-policy-json-to-terraform"
      package-version: ${{ needs.lookup.outputs.package_version }}

  upload:
    if: needs.lookup.outputs.cache_hit != 'true'
    needs: build
    name: Upload to S3
    uses: northwood-labs/package-building/.github/workflows/upload-to-s3.yml@main
    secrets: inherit
    with:
      package-name: "iam-policy-json-to-terraform"
      package-version: ${{ needs.lookup.outputs.package_version }}

  metadata_rpm:
    if: needs.lookup.outputs.cache_hit != 'true'
    needs: upload
    name: RPM metadata
    uses: northwood-labs/package-building/.github/workflows/generate-rpm-meta.yml@main
    secrets: inherit

  metadata_deb:
    if: needs.lookup.outputs.cache_hit != 'true'
    needs: upload
    name: DEB metadata
    uses: northwood-labs/package-building/.github/workflows/generate-deb-meta.yml@main
    secrets: inherit

  metadata_apk:
    if: needs.lookup.outputs.cache_hit != 'true'
    needs: upload
    name: APK metadata
    uses: northwood-labs/package-building/.github/workflows/generate-apk-meta.yml@main
    secrets: inherit