docker-update-images.yaml

name: Docker Update Images

on:
  workflow_dispatch:

  schedule:
    - cron: "0 9 * * 1" # once a week

  pull_request:
    paths:
      - scripts/update_docker_images.py
      - .github/workflows/docker-update-images.yaml

jobs:
  update:
    runs-on: ubuntu-latest

    steps:
      - uses: actions/checkout@v3

      - name: Login to Docker Hub
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.ENV_DOCKERHUB_USERNAME }}
          password: ${{ secrets.ENV_DOCKERHUB_PASSWORD }}

      - name: Check and pin updates (if any)
        id: check_update
        run: python3 scripts/update_docker_images.py

      - name: Create Pull Request
        if: ${{ steps.check_update.outputs.NEED_UPDATE == 'True' }}
        uses: peter-evans/create-pull-request@v5
        with:
          token: ${{ secrets.REPO_TOKEN }}
          commit-message: "Update Docker images"
          title: "Update Docker images"
          body: "Update Docker images"
          base: main
          branch: "docker-update-images"
          delete-branch: true
          team-reviewers: |
            aptos-labs/prod-eng
            aptos-labs/security
          labels: |
            CICD:run-e2e-tests