Updates (#149)

.dockerignore

@@ -1,7 +1,6 @@
 **/__pycache__
 *.pyc
 **/cdk.out
-deploymnet/
 .venv/
 .git/
 .github/
@@ -10,12 +9,8 @@ deploymnet/
 docker/
 scripts/
 test/
-cdk.py
 .coverage
 .hadolint.yaml
 .pylintrc
 README.md
-cdk.context.json
-cdk.json
 docker-compose.yaml
-mkdocs.yaml

.github/workflows/deploy_docs.yaml → .github/deploy_docs.yaml

@@ -26,7 +26,7 @@ jobs:
     if: ${{ github.event.workflow_run.conclusion == 'success' }}
     strategy:
       matrix:
-        python-version: ["3.11"]
+        python-version: ["3.12"]
     steps:
       - name: Checkout
         uses: actions/checkout@v3

.github/workflows/build_container.yaml

@@ -0,0 +1,57 @@
+---
+name: Build Container
+
+on:
+  workflow_call:
+    inputs:
+      target:
+        required: true
+        type: string
+      dockerfile:
+        required: true
+        type: string
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: read
+    steps:
+      - uses: actions/checkout@v3
+
+      - name: "Hadolint: docker/${{ inputs.dockerfile }}"
+        uses: hadolint/[email protected]
+        with:
+          dockerfile: docker/${{ inputs.dockerfile }}
+
+      - name: "Set up Docker Buildx"
+        uses: docker/setup-buildx-action@v3
+
+      - name: "Login to GitHub Container Registry"
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}          
+
+      - name: "Set environment: ${{ inputs.target }}"
+        run: scripts/include/env-github ${{ inputs.target }}
+
+      - name: "Build and push"
+        uses: docker/build-push-action@v5
+        with:
+          context: .
+          file: docker/${{ inputs.dockerfile }}
+          target: ${{ inputs.target }}
+          platforms: linux/amd64
+          build-args: |
+            "CDK_TAG=${{ env.CDK_TAG }}"
+            "CDK_VERSION=${{ env.CDK_VERSION }}"
+            "CODE_DIR=${{ env.CODE_DIR }}"
+            "PIP_VERSION=${{ env.PIP_VERSION }}"
+            "POETRY_VERSION=${{ env.POETRY_VERSION }}"
+          push: true
+          tags: ${{ env.CONTAINER_IMAGE_REVISION }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max

.github/workflows/codeql-analysis.yml → .github/workflows/codeql-analysis.yaml

@@ -21,7 +21,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.11"]
+        python-version: ["3.12"]
 
     steps:
       - name: Checkout repository

.github/workflows/lint_docs.yaml

@@ -0,0 +1,22 @@
+---
+name: Lint Documentation
+
+on:
+  workflow_call:
+
+jobs:
+  lint_docs:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: "Linting: Docs"
+        run: scripts/ci/lint-docs

.github/workflows/lint_python.yaml

@@ -0,0 +1,70 @@
+---
+name: Lint Python
+
+on:
+  workflow_call:
+
+jobs:
+  black:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: "Linting: black"
+        run: scripts/ci/lint-black
+
+  isort:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: "Linting: isort"
+        run: scripts/ci/lint-isort
+
+  mypy:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: "Linting: mypy"
+        run: scripts/ci/lint-mypy
+
+  pylint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: "Linting: pylint"
+        run: scripts/ci/lint-pylint

.github/workflows/lint_yaml.yaml

@@ -0,0 +1,23 @@
+---
+name: Lint YAML
+
+on:
+  workflow_call:
+
+jobs:
+  lint:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: "Linting: yaml"
+        run: scripts/ci/lint-yaml
+        if: always()