build-docker-full.yml

name: build-docker-full
on:
  workflow_call:
    inputs:
      version:
        type: string
        description: The release semver version
        required: true
      channel:
        type: string
        description: The release channel (latest-rc, nightly, dev, etc)
        required: true

jobs:
  buildPush:
    runs-on: ubuntu-latest
    steps:
      - name: Check out the repo
        uses: actions/checkout@v4

      - uses: actions/setup-node@v4
        id: setup-node
        with:
          node-version: ${{ vars.NODE_VERSION_OVERRIDE || 'lts/*' }}

      - name: Log in to Docker Hub
        uses: docker/login-action@0d4c9c5ea7693da7b068278f7b52bda2a190a446
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@8e5442c4ef9f78752691e2d8f8d19755c6f78e81
        with:
          images: salesforce/cli

      - name: Collect Node checksum
        id: node-checksum
        run: |
          NODE_VERSION="$STEPS_SETUP_NODE_NODE_VERSION"

          URL="https://nodejs.org/dist/$NODE_VERSION/SHASUMS256.txt"
          echo "Retrieving SHA data from: $URL"

          SHA=$(curl -s "$URL" | awk "/[0-9a-f]{64}  node-$NODE_VERSION-linux-x64.tar.gz/ { print \$1 }")
          echo "Checksum found: $SHA"

          echo "sha=$SHA" >> "$GITHUB_OUTPUT"
        env:
          STEPS_SETUP_NODE_NODE_VERSION: ${{ steps.setup-node.outputs.node-version }}

      - name: Build and push Docker image
        uses: docker/build-push-action@ca052bb54ab0790a636c9b5f226502c73d547a25
        with:
          context: .
          push: true
          labels: ${{ steps.meta.outputs.labels }}
          file: dockerfiles/Dockerfile_full
          build-args: |
            NODE_VERSION=${{ steps.setup-node.outputs.node-version }}
            NODE_CHECKSUM=${{ steps.node-checksum.outputs.sha }}
            SF_CLI_VERSION=${{ inputs.version }}
          tags: salesforce/cli:${{ inputs.channel }}-full, salesforce/cli:${{ inputs.version }}-full

  verify:
    needs: buildPush
    runs-on: ubuntu-latest
    container:
      image: salesforce/cli:${{ inputs.version }}-full
    steps:
      - name: verify node, sf, jq
        # without bash this will fail.  Not sure what the default shell is but it doesn't like the [[(())]] bashism
        shell: bash
        run: |
          set -e
          node -v
          sf version --verbose
          jq --help
          NODE_VERSION=$(sf version --verbose --json | jq '.nodeVersion')
          SF_CLI_VERSION=$(sf version --verbose --json | jq '.cliVersion')
          if [[ ((`echo $SF_CLI_VERSION | grep -c "@salesforce/cli/"` > 0))]]
          then
            echo "sf installed -" $SF_CLI_VERSION
          else
            echo "The sf installation could not be verified"
            exit 1
          fi
          if [[ ((`echo $NODE_VERSION | grep -c "v"` > 0))]]
          then
            echo "node installed -" $NODE_VERSION
          else
            echo "The node installation could not be verified"
            exit 1
          fi