Build a ci-local tagged version of the hook sdk which is then used by the hook builds

Closes #11

Author: J12934

.github/workflows/ci.yaml

@@ -198,6 +198,7 @@ jobs:
           repository: scbexperimental/hook-sdk-nodejs
           path: ./hook-sdk/nodejs/
           tag_with_ref: true
+          tags: "ci-local"
       # Actual PersistenceProviders
       - uses: docker/build-push-action@v1
         name: "Build & Push Elastic PersistenceProvider Hook Image"
@@ -207,6 +208,7 @@ jobs:
           repository: scbexperimental/persistence-elastic
           path: ./hooks/persistence-elastic/
           tag_with_ref: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push Elastic PersistenceProvider Dashboard Importer Image"
         with:
@@ -223,6 +225,7 @@ jobs:
           repository: scbexperimental/generic-webhook
           path: ./hooks/generic-webhook/
           tag_with_ref: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push ImperativeSubsequentScans Hook Image"
         with:
@@ -231,6 +234,7 @@ jobs:
           repository: scbexperimental/hook-imperative-subsequent-scans
           path: ./hooks/imperative-subsequent-scans/
           tag_with_ref: true
+          build_args: baseImageTag=ci-local
       - uses: docker/build-push-action@v1
         name: "Build & Push UpdateField Hook Image"
         with:
@@ -240,6 +244,7 @@ jobs:
           path: ./hooks/update-field/
           tag_with_ref: true
           tag_with_sha: true
+          build_args: baseImageTag=ci-local
   scannerImages:
     # Note we only build images for scanner that don't provider official public container images
     name: "Build / Scanner"

hooks/generic-webhook/Dockerfile

@@ -1,10 +1,11 @@
+ARG baseImageTag
 FROM node:12-alpine as build
 RUN mkdir -p /home/app
 WORKDIR /home/app
 COPY package.json package-lock.json ./
 RUN npm ci --production
 
-FROM scbexperimental/hook-sdk-nodejs:latest
+FROM scbexperimental/hook-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/hook-wrapper/hook/
 COPY --from=build --chown=app:app /home/app/node_modules/ ./node_modules/
 COPY --chown=app:app ./hook.js ./hook.js

hooks/imperative-subsequent-scans/Dockerfile

@@ -1,5 +1,6 @@
 # This image doesn't install the hooks dependencies, as it only has the @kubernetes/client-node dependencies which is already installed via the hook-sdk
 
-FROM scbexperimental/hook-sdk-nodejs:latest
+ARG baseImageTag
+FROM scbexperimental/hook-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/hook-wrapper/hook/
 COPY --chown=app:app hook.js scan-helpers.js ./

hooks/persistence-elastic/Dockerfile

@@ -1,10 +1,11 @@
+ARG baseImageTag
 FROM node:12-alpine as build
 RUN mkdir -p /home/app
 WORKDIR /home/app
 COPY package.json package-lock.json ./
 RUN npm ci --production
 
-FROM scbexperimental/hook-sdk-nodejs:latest
+FROM scbexperimental/hook-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/hook-wrapper/hook/
 COPY --from=build --chown=app:app /home/app/node_modules/ ./node_modules/
 COPY --chown=app:app ./hook.js ./hook.js

hooks/update-field/Dockerfile

@@ -1,10 +1,11 @@
+ARG baseImageTag
 FROM node:12-alpine as build
 RUN mkdir -p /home/app
 WORKDIR /home/app
 COPY package.json package-lock.json ./
 RUN npm ci --production
 
-FROM scbexperimental/hook-sdk-nodejs:latest
+FROM scbexperimental/hook-sdk-nodejs:${baseImageTag:-latest}
 WORKDIR /home/app/hook-wrapper/hook/
 COPY --from=build --chown=app:app /home/app/node_modules/ ./node_modules/
 COPY --chown=app:app ./hook.js ./hook.js