bump-version.yml

name: Bump Cloudbeat version

on:
  # workflow_dispatch:
  #   inputs:
  #     cloudbeat_version:
  #       description: "New cloudbeat major.minor version (e.g. 8.13)"
  #       required: true
  pull_request:
    branches:
      - main

env:
  GITHUB_TOKEN: ${{ secrets.CLOUDSEC_MACHINE_TOKEN }}
  NEXT_CLOUDBEAT_VERSION: ${{ inputs.cloudbeat_version }}
  AWS_ACCESS_KEY_ID: ${{ secrets.CSPM_CFT_ACCESS_KEY_ID }}
  AWS_SECRET_ACCESS_KEY: ${{ secrets.CSPM_CFT_SECRET_ACCESS_KEY }}

jobs:
  bump_version:
    runs-on: ubuntu-latest

    steps:
      - name: Checkout Cloudbeat Repo
        uses: actions/checkout@v4
        with:
          token: ${{ secrets.CLOUDSEC_MACHINE_TOKEN }}

      - name: Setup Cloudbeat Versions
        run: |
          echo "CURRENT_CLOUDBEAT_VERSION=$(grep defaultBeatVersion version/version.go | cut -f2 -d "\"")" >> $GITHUB_ENV
          echo "NEXT_CLOUDBEAT_VERSION=$NEXT_CLOUDBEAT_VERSION.0" >> $GITHUB_ENV
          echo "Bumping $CURRENT_CLOUDBEAT_VERSION to $NEXT_CLOUDBEAT_VERSION"

      - name: Setup Git User
        run: |
          git config --global user.email "cloudsecmachine@users.noreply.github.com"
          git config --global user.name "Cloud Security Machine"

      - name: Bump Cloudbeat
        run: scripts/bump_cloudbeat.sh

      # - name: Bump Cloud Security Posture Integration
      #   run: scripts/bump_integration.sh