|
22 | 22 | - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 |
23 | 23 | with: |
24 | 24 | node-version: 20 |
25 | | - - name: Get JFrog OIDC token |
26 | | - run: | |
27 | | - set -euo pipefail |
28 | | - ID_TOKEN=$(curl -sLS \ |
29 | | - -H "User-Agent: actions/oidc-client" \ |
30 | | - -H "Authorization: Bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \ |
31 | | - "${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=jfrog-github" | jq .value | tr -d '"') |
32 | | - echo "::add-mask::${ID_TOKEN}" |
33 | | - ACCESS_TOKEN=$(curl -sLS -XPOST -H "Content-Type: application/json" \ |
34 | | - "https://databricks.jfrog.io/access/api/v1/oidc/token" \ |
35 | | - -d "{\"grant_type\": \"urn:ietf:params:oauth:grant-type:token-exchange\", \"subject_token_type\":\"urn:ietf:params:oauth:token-type:id_token\", \"subject_token\": \"${ID_TOKEN}\", \"provider_name\": \"github-actions\"}" | jq .access_token | tr -d '"') |
36 | | - echo "::add-mask::${ACCESS_TOKEN}" |
37 | | - if [ -z "$ACCESS_TOKEN" ] || [ "$ACCESS_TOKEN" = "null" ]; then |
38 | | - echo "FAIL: Could not extract JFrog access token" |
39 | | - exit 1 |
40 | | - fi |
41 | | - echo "JFROG_ACCESS_TOKEN=${ACCESS_TOKEN}" >> "$GITHUB_ENV" |
42 | | - echo "JFrog OIDC token obtained successfully" |
43 | | - - name: Configure npm for JFrog |
44 | | - run: | |
45 | | - set -euo pipefail |
46 | | - cat > ~/.npmrc << EOF |
47 | | - registry=https://databricks.jfrog.io/artifactory/api/npm/db-npm/ |
48 | | - //databricks.jfrog.io/artifactory/api/npm/db-npm/:_authToken=${JFROG_ACCESS_TOKEN} |
49 | | - always-auth=true |
50 | | - EOF |
51 | | - echo "npm configured to use JFrog registry" |
| 25 | + - uses: ./.github/actions/setup-jfrog |
52 | 26 | - name: Cache node modules |
53 | 27 | uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 |
54 | 28 | env: |
|
88 | 62 | uses: actions/setup-python@7f4fc3e22c37d6ff65e88745f38bd3157c663f7c # v4 |
89 | 63 | with: |
90 | 64 | python-version: '3.10' |
91 | | - - name: Get JFrog OIDC token |
92 | | - run: | |
93 | | - set -euo pipefail |
94 | | - ID_TOKEN=$(curl -sLS \ |
95 | | - -H "User-Agent: actions/oidc-client" \ |
96 | | - -H "Authorization: Bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \ |
97 | | - "${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=jfrog-github" | jq .value | tr -d '"') |
98 | | - echo "::add-mask::${ID_TOKEN}" |
99 | | - ACCESS_TOKEN=$(curl -sLS -XPOST -H "Content-Type: application/json" \ |
100 | | - "https://databricks.jfrog.io/access/api/v1/oidc/token" \ |
101 | | - -d "{\"grant_type\": \"urn:ietf:params:oauth:grant-type:token-exchange\", \"subject_token_type\":\"urn:ietf:params:oauth:token-type:id_token\", \"subject_token\": \"${ID_TOKEN}\", \"provider_name\": \"github-actions\"}" | jq .access_token | tr -d '"') |
102 | | - echo "::add-mask::${ACCESS_TOKEN}" |
103 | | - if [ -z "$ACCESS_TOKEN" ] || [ "$ACCESS_TOKEN" = "null" ]; then |
104 | | - echo "FAIL: Could not extract JFrog access token" |
105 | | - exit 1 |
106 | | - fi |
107 | | - echo "JFROG_ACCESS_TOKEN=${ACCESS_TOKEN}" >> "$GITHUB_ENV" |
108 | | - echo "JFrog OIDC token obtained successfully" |
109 | | - - name: Configure npm for JFrog |
110 | | - run: | |
111 | | - set -euo pipefail |
112 | | - cat > ~/.npmrc << EOF |
113 | | - registry=https://databricks.jfrog.io/artifactory/api/npm/db-npm/ |
114 | | - //databricks.jfrog.io/artifactory/api/npm/db-npm/:_authToken=${JFROG_ACCESS_TOKEN} |
115 | | - always-auth=true |
116 | | - EOF |
117 | | - echo "npm configured to use JFrog registry" |
| 65 | + - uses: ./.github/actions/setup-jfrog |
118 | 66 | - name: Cache node modules |
119 | 67 | uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 |
120 | 68 | with: |
@@ -157,33 +105,7 @@ jobs: |
157 | 105 | - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4 |
158 | 106 | with: |
159 | 107 | node-version: 20 |
160 | | - - name: Get JFrog OIDC token |
161 | | - run: | |
162 | | - set -euo pipefail |
163 | | - ID_TOKEN=$(curl -sLS \ |
164 | | - -H "User-Agent: actions/oidc-client" \ |
165 | | - -H "Authorization: Bearer $ACTIONS_ID_TOKEN_REQUEST_TOKEN" \ |
166 | | - "${ACTIONS_ID_TOKEN_REQUEST_URL}&audience=jfrog-github" | jq .value | tr -d '"') |
167 | | - echo "::add-mask::${ID_TOKEN}" |
168 | | - ACCESS_TOKEN=$(curl -sLS -XPOST -H "Content-Type: application/json" \ |
169 | | - "https://databricks.jfrog.io/access/api/v1/oidc/token" \ |
170 | | - -d "{\"grant_type\": \"urn:ietf:params:oauth:grant-type:token-exchange\", \"subject_token_type\":\"urn:ietf:params:oauth:token-type:id_token\", \"subject_token\": \"${ID_TOKEN}\", \"provider_name\": \"github-actions\"}" | jq .access_token | tr -d '"') |
171 | | - echo "::add-mask::${ACCESS_TOKEN}" |
172 | | - if [ -z "$ACCESS_TOKEN" ] || [ "$ACCESS_TOKEN" = "null" ]; then |
173 | | - echo "FAIL: Could not extract JFrog access token" |
174 | | - exit 1 |
175 | | - fi |
176 | | - echo "JFROG_ACCESS_TOKEN=${ACCESS_TOKEN}" >> "$GITHUB_ENV" |
177 | | - echo "JFrog OIDC token obtained successfully" |
178 | | - - name: Configure npm for JFrog |
179 | | - run: | |
180 | | - set -euo pipefail |
181 | | - cat > ~/.npmrc << EOF |
182 | | - registry=https://databricks.jfrog.io/artifactory/api/npm/db-npm/ |
183 | | - //databricks.jfrog.io/artifactory/api/npm/db-npm/:_authToken=${JFROG_ACCESS_TOKEN} |
184 | | - always-auth=true |
185 | | - EOF |
186 | | - echo "npm configured to use JFrog registry" |
| 108 | + - uses: ./.github/actions/setup-jfrog |
187 | 109 | - name: Cache node modules |
188 | 110 | uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4 |
189 | 111 | with: |
|
0 commit comments