feat(image): add GitHub CLI for gh api workflow steps

Workflow steps calling 'gh api' (dependency-graph snapshot submission in
fastapi_factory_utilities CI) failed with 'gh: command not found' because the
runner image never shipped the GitHub CLI.

Author: miragecentury

Containerfile

@@ -110,6 +110,16 @@ RUN curl -sSL -o /usr/local/bin/kubectl \
       "https://dl.k8s.io/release/v${KUBECTL_VERSION}/bin/linux/amd64/kubectl" \
     && chmod +x /usr/local/bin/kubectl
 
+# Install GitHub CLI (workflows calling `gh api`, e.g. dependency-graph snapshots)
+ARG GH_CLI_VERSION=2.96.0
+RUN curl -sSL -o /tmp/gh.tgz \
+      "https://github.com/cli/cli/releases/download/v${GH_CLI_VERSION}/gh_${GH_CLI_VERSION}_linux_amd64.tar.gz" \
+    && tar -xzf /tmp/gh.tgz -C /tmp "gh_${GH_CLI_VERSION}_linux_amd64/bin/gh" \
+    && mv "/tmp/gh_${GH_CLI_VERSION}_linux_amd64/bin/gh" /usr/local/bin/gh \
+    && chmod +x /usr/local/bin/gh \
+    && rm -rf /tmp/gh.tgz "/tmp/gh_${GH_CLI_VERSION}_linux_amd64" \
+    && gh --version
+
 # Install pack (Cloud Native Buildpacks CLI)
 ARG PACK_VERSION=0.40.8
 RUN curl -sSL -o /tmp/pack.tgz \

README.md

@@ -23,6 +23,7 @@ Container image based on the [GitHub Actions Runner](https://github.com/actions/
 | [Argo Workflows CLI](https://github.com/argoproj/argo-workflows) | Workflow orchestration on Kubernetes |
 | [Kargo CLI](https://github.com/akuity/kargo) | Application lifecycle orchestration |
 | [kubectl](https://kubernetes.io/docs/reference/kubectl/) | Kubernetes CLI (in-cluster kpack builds from green ARC runners) |
+| [gh](https://cli.github.com/) | GitHub CLI (`gh api` calls from workflows, e.g. dependency-graph snapshots) |
 | [jq](https://jqlang.org/) | JSON processor (kpack git-token refresher CronJob) |
 | [pack](https://github.com/buildpacks/pack) | Cloud Native Buildpacks CLI |
 | [skopeo](https://github.com/containers/skopeo) | Container image registry operations |

manifest.yaml

@@ -10,6 +10,7 @@ build:
     - KARGO_VERSION=1.10.8
     - PACK_VERSION=0.40.8
     - KUBECTL_VERSION=1.36.2
+    - GH_CLI_VERSION=2.96.0
     - DIVE_VERSION=0.13.1
     - SYFT_VERSION=1.46.0
     - GRYPE_VERSION=0.115.0

renovate.json

@@ -76,6 +76,15 @@
       "datasourceTemplate": "github-releases",
       "extractVersionTemplate": "^v?(?<version>.+)$"
     },
+    {
+      "customType": "regex",
+      "description": "Update GitHub CLI version",
+      "fileMatch": ["^Containerfile$", "^manifest\\.yaml$"],
+      "matchStrings": ["GH_CLI_VERSION=(?<currentValue>\\S+)"],
+      "depNameTemplate": "cli/cli",
+      "datasourceTemplate": "github-releases",
+      "extractVersionTemplate": "^v?(?<version>.+)$"
+    },
     {
       "customType": "regex",
       "description": "Update pack (Buildpacks) CLI version",