GitHub Actions

Connect your GitHub Actions pipelines to Codefresh

Codefresh Hosted GitOps can be used with any popular Continuous Integration (CI) solution, not just with Codefresh CI.

You can connect any external CI solution to Codefresh, such as GitHub Actions for example, to take care of common CI tasks such as building/testing/scanning source code, with Codefresh Hosted GitOps still responsible for the deployment, including image enrichment and reporting.
See Image enrichment with integrations.

Codefresh Marketplace GitHub Action

To support the integration between GitHub Actions and Codefresh, they have created a dedicated action in the Codefresh marketplace. The action combines image enrichment and reporting through integrations with Jira, and container registries such as DockerHub or Quay.

Use the action in the following manner:

1. Create a GitHub Actions pipeline like you normally do.
2. Use any existing CI actions for compiling code, running unit tests, security scanning etc.
3. Place the final action in the pipeline as the “report image” action provided by Codefresh, copying the arguments and values from the GitHub Actions integration you set up in Codefresh.
4. When the pipeline completes execution, Codefresh retrieves the information on the image that was built and its metadata (essentially the same data that Codefresh CI would send automatically).
5. View the image in Codefresh in the Images dashboard, and in any GitOps deployment in which it is used.

Codefresh-GitHub Action integration arguments

The table describes the arguments required for GitHub Action-Codefresh integration.

Connect a GitHub Action in Codefresh

Add a GitHub Action to Codefresh with the required arguments.

1. In the Codefresh UI, go to Integrations.
2. Select GitHub Actions, and then click Configure.
3. Define the arguments for the GitHub Action. Review GitHub Action arguments.
   • For the CF_API_KEY, click Generate. Note down the token generated.
   • To create a container registry integration for DockerHub if you don’t have one, click Create Container Registry Integration, and then configure the settings. See Docker Hub integration.
   • To create a Jira integration, click Create Atlassian Jira Integration, and then configure the settings. See Jira integration.
4. Enter this token in GitHub Actions as a secret with the name CF_API_KEY.
   Now you can reference it in all GitHub pipelines as you would any other secret.

5. Copy the arguments and their values to the GitHub Action pipeline. See the example below for guidelines.

GitHub Actions pipeline example

Here is an example pipeline that uses GitHub Actions to build a container image, and the Codefresh action to enrich and report the resulting image to Codefresh.

Because a Jira integration account is configured in Codefresh, the step needs only the name for CF_JIRA_INTEGRATION, instead of explicit credentials CF_JIRA_API_TOKEN, CF_JIRA_HOST_URL, and CF_JIRA_EMAIL.

name: Docker Image CI

on:
  push:
    branches: [ main ]
  pull_request:
    branches: [ main ]
jobs:
  build:
    environment:
      name: test
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v3
      - name: Login to DockerHub
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
      - name: Build & push the Docker image
        env:
          CF_IMAGE: ${{ secrets.DOCKERHUB_USERNAME }}/build-by-github-action:0.0.1
        run: |
          docker build . --file Dockerfile --tag $CF_IMAGE && docker push $CF_IMAGE
          echo "Image should be accessible to your local machine (after docker login) by:"
          echo "docker pull $CF_IMAGE"
          docker pull $CF_IMAGE
          echo "On the next step, the report image would use the integration to pull information on the reported image, and using the specified enrichers."
      - name: report image by action
        with:
          # Specify cluster app-proxy
          CF_HOST: "${{ secrets.CF_RUNTIME_HOST }}"
          CF_API_KEY: ${{ secrets.USER_TOKEN }}
          # use image registry integration - the name of the integration used for pulling information on the image.
          CF_CONTAINER_REGISTRY_INTEGRATION: "docker"

          # report image 
          CF_IMAGE: ${{ secrets.DOCKERHUB_USERNAME }}/build-by-github-action:0.0.1
          # integration with
          CF_ENRICHERS: "jira, git"
          # use githug token
          CF_GITHUB_TOKEN: ${{ secrets.CF_GITHUB_TOKEN }}    
          # use jira integration - jira is the name of the integration created in codefresh argo platform.
          CF_JIRA_INTEGRATION: "jira" 
          CF_JIRA_MESSAGE: "A message with embedded issue ( i.e. CR-11027 ) that would be use query jira for the ticket "
          # a specified prefix for finding the jira issue 
          CF_JIRA_PROJECT_PREFIX: "CR"
        uses: codefresh-io/codefresh-report-image@0.0.62
        
'

GitHub Action logs

View and analyze logs for GitHub Action workflows through the Logs tab. When a GitHub Action is run, it is added to the Logs tab.
You can:

• Filter by status or by date range to view a subset of actions
• Navigate to the build file in GitHub Actions, and view the Codefresh report image step

Build YAML in GitHub Action

The Run column includes the link to the build files for the actions.

Here are examples of the build file for the GitHub Action (top) and of the Codefresh report image step in the action (below).

Related articles

Add Git sources to runtimes
Shared configuration repo