Invoke central reusable workflows

[JayChanggithub]

Select Topic Area

Question

Body

Hi Support,
I am new to adopting GitHub Actions for implementing CI/CD automation. Below is my central reusable repository, github/rgm-co/co-pipeline-action-core, along with its folder structure.

├── .github
│   ├── actions
│   │   └── vault-integrated
│   │       └── action.yaml
│   └── workflows
│       ├── build.yaml
│       └── vault-integrated.yaml

The content of actions/vault-integrated/action.yaml is as follows:

name: 'vault integrated'
description: 'vault integrated mcp'
inputs:
  vault_id:
    description: 'vault_id'
    required: true


runs:
  using: 'docker'
  # using: "composite"
  # image: 'docker://python:3.12'
  image: 'docker://deploy-releases-hyperspace-docker.common.repositories.cloud.sap/co-pipeline-action-core:0.0.1-20241123065245_5ca546307b095f59049b88118a2dc0e2da1b9cfc'
  pre-entrypoint: |
    echo xxx | docker login deploy-releases-hyperspace-docker.common.repositories.cloud.sap -u xxx --password-stdin
  args: [
    'ls',  '-al', '.'
  ]
  
  env:
    VAULT_ID: ${{ inputs.vault_id }}

The content of central workflows/vault-integrated.yaml is as follows:

name: vault-integrated

on:
  # pull_request:
  #  branches:
  #    - main
  workflow_call:
    inputs:
      vault_id:
        required: true
        type: string
        default: xxxxxxxyyyyycccccc

    
    #  DOCKER_REGISTRY:
    #    required: true
    #  DOCKER_USERNAME:
    #    required: true
    #  DOCKER_PASSWORD:
    #    required: true


env:
  VAULT_ID: ${{ inputs.vault_id }}


jobs:
  vault-integrated:
    runs-on: self-hosted
    steps:
      - name: Checkout
        uses: actions/checkout@v2

      - name: Debug - Print Environment Variables
        run: env

      - name: pprint
        run: |
          echo "VAULT_ID: $VAULT_ID"

      - name: Setup Vault
        uses: rgm/co-pipeline-action-core/.github/actions/vault-integrated@actions-designed
        with:
          vault_id: ${{ env.VAULT_ID }}

I have another repository that contains workflows to invoke the workflows from the above repository and perform tasks. This repository is called co-pipeline-rgm, and its folder structure is as follows:

├── .github
│   └── workflows
│       └── invoke-core-function.yaml

The workflows/invoke-core-function.yaml contents is below.

name: Invoke Core Function

on:
  workflow_dispatch:
  # pull_request:
  #  branches:
  #    - main

env:
  CORE_CONFIG_PATH: "core/core-configuration.yaml"
  PIPER_SECRET: ${{ secrets.PIPER_VAULTAPPROLEID }}

jobs:
  # init: # required, init configurations and envs for piper steps used by the following jobs
  #  uses: project-piper/piper-pipeline-github/.github/workflows/init.yml@main
  #  secrets: inherit

  invoke-core-function:
    runs-on: self-hosted
    # needs: [ init ]
    outputs:
      CORE_CONFIG_PATH: ${{ env.CORE_CONFIG_PATH }}

    steps:
      - name: checkout
        uses: actions/checkout@v4

      - name: invoke core function
        id: invoke-core-function
        run: "echo \"CORE_CONFIG_PATH: ${{ env.CORE_CONFIG_PATH }}\""

      - name: print github secret for core function
        run: |

          if [ -z ${{ env.PIPER_SECRET}} ]; then
              echo "Secret not available"
          else
              echo "Secret is available"
          fi
      # - name: Log in to Docker Registry
      #  uses: docker/login-action@v2
      #  with:



  # invoke here
  vault-integrated:
    # runs-on: self-hosted
    needs: invoke-core-function
    uses: rgm/co-pipeline-action-core/.github/workflows/vault-integrated.yaml@actions-designed
    with:
      vault_id: "123456789"

However, whenever I trigger these workflows, I always encounter an authentication error when pulling the Docker image. I have confirmed that the pre-entrypoint is hardcoded in the action.yaml file within the central reusable repository. Thank you for your help, Or is there any recommended approach to achieve the expected result, which involves adopting reusable workflows and wrapping them in a Docker container?