GitHub Actions workflow templates

List of GitHub Actions templates I have created:

• Terraform Validate action template
• Auto Merge
• Spacelift Deploy
• Markdown lint
• Docker image publish
• Docker build
• Ansible deploy
• TF basic
• Trivy scan

How to use the actions

TF validate actions

name: TF validate CI
on: [push]
jobs:
  build-and-publish:
    runs-on: ubuntu-latest

    permissions:
      id-token: write
      contents: write

    steps:
      - uses: actions/checkout@v3


      - name: Run TF validate
        uses: moabukar/actions-templates/terraform-validate@main
        # with:
        #   input1:
        #   input2:

Docker publish action

name: Docker Publish Workflow
on:
  push:
    branches:
      - branch # Customize this to your main branch

jobs:
  publish:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v3

      - name: Publish Docker Image
        uses: moabukar/actions-templates/docker-publish@main
        with:
          ECR_REPOSITORY_NAME: <Your ECR Repository Name>
          BASE_BRANCH: main # Customize this to your base branch
          SHA_TO_CHECKOUT: ${{ github.sha }}
          IMAGE_TAG_PREFIX: v1.0. # Customize the image tag prefix
          DOCKER_FILE_PATH: ./path/to/Dockerfile # Customize the Dockerfile path
          REPOSITORY_NAME: your-repo-name # Customize your repository name

Markdown lint

name: Markdown Lint Workflow
on:
  push:
    branches:
      - main  # Customize this to the branch you want to trigger the action on

jobs:
  markdown-lint:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2  # You can use any version of checkout action

      - name: Use markdown-lint action from moabukar/actions-templates
        uses: moabukar/actions-templates/markdown-lint@main
        with:
          target-repo: ${{ github.repository }}

Trivy scan

name: Trivy Scan Workflow
on:
  push:
    branches:
      - main # Customize this to the branch you want to trigger the action on

jobs:
  trivy-scan:
    name: CVE Image Scan

    runs-on: ubuntu-latest

    steps:
      - name: Checkout Repository
        uses: actions/checkout@v2 

      - name: Run Trivy Scan Action
        uses: moabukar/actions-templates/trivy-scan@main
        with:
          image: 'ghcr.io/${{ github.repository }}:${{ github.sha }}'  # Customize the image reference
          exit-code: '1'  # Customize the exit code if needed
          severity: 'HIGH,CRITICAL'  # Customize the severity if needed
          ignore-unfixed: true  # Customize to ignore unfixed vulnerabilities if needed
          upload-results: false  # Customize to upload results if needed

        env:
          TRIVY_USERNAME: ${{ secrets.registry-username }}  # Customize your registry username secret
          TRIVY_PASSWORD: ${{ secrets.registry-password }}  # Customize your registry password secret