Initial Pipelines

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @projectriff/riff-dev

.github/dependabot.yml

@@ -1,7 +1,16 @@
 version: 2
 updates:
-- package-ecosystem: github-actions
-  directory: "/"
-  schedule:
-    interval: daily
-  open-pull-requests-limit: 10
+    - package-ecosystem: github-actions
+      directory: /
+      schedule:
+        interval: daily
+      labels:
+        - semver:patch
+        - type:dependency-upgrade
+    - package-ecosystem: gomod
+      directory: /
+      schedule:
+        interval: daily
+      labels:
+        - semver:patch
+        - type:dependency-upgrade

.github/labels.yml

@@ -0,0 +1,27 @@
+- name: semver:major
+  description: A change requiring a major version bump
+  color: f9d0c4
+- name: semver:minor
+  description: A change requiring a minor version bump
+  color: f9d0c4
+- name: semver:patch
+  description: A change requiring a patch version bump
+  color: f9d0c4
+- name: type:bug
+  description: A general bug
+  color: e3d9fc
+- name: type:dependency-upgrade
+  description: A dependency upgrade
+  color: e3d9fc
+- name: type:documentation
+  description: A documentation update
+  color: e3d9fc
+- name: type:enhancement
+  description: A general enhancement
+  color: e3d9fc
+- name: type:question
+  description: A user question
+  color: e3d9fc
+- name: type:task
+  description: A general task
+  color: e3d9fc

.github/release-drafter.yml

@@ -0,0 +1,32 @@
+template: $CHANGES
+name-template: $RESOLVED_VERSION
+tag-template: v$RESOLVED_VERSION
+categories:
+    - title: ⭐️ Enhancements
+      labels:
+        - type:enhancement
+    - title: "\U0001F41E Bug Fixes"
+      labels:
+        - type:bug
+    - title: "\U0001F4D4 Documentation"
+      labels:
+        - type:documentation
+    - title: ⛏ Dependency Upgrades
+      labels:
+        - type:dependency-upgrade
+    - title: "\U0001F6A7 Tasks"
+      labels:
+        - type:task
+exclude-labels:
+    - type:question
+version-resolver:
+    major:
+        labels:
+            - semver:major
+    minor:
+        labels:
+            - semver:minor
+    patch:
+        labels:
+            - semver:patch
+    default: patch

.github/workflows/create-package.yml

@@ -0,0 +1,148 @@
+name: Create Package
+"on":
+    release:
+        types:
+            - published
+jobs:
+    create-package:
+        name: Create Package
+        runs-on:
+            - ubuntu-latest
+        steps:
+            - name: Docker login gcr.io
+              uses: docker/login-action@v1
+              with:
+                password: ${{ secrets.RIFF_GCLOUD_SERVICE_ACCOUNT_KEY }}
+                registry: gcr.io
+                username: _json_key
+            - uses: actions/checkout@v2
+            - if: ${{ false }}
+              uses: actions/cache@v2
+              with:
+                key: ${{ runner.os }}-go-${{ hashFiles('**/buildpack.toml', '**/package.toml') }}
+                path: |-
+                    ${{ env.HOME }}/.pack
+                    ${{ env.HOME }}/carton-cache
+                restore-keys: ${{ runner.os }}-go-
+            - uses: actions/setup-go@v2
+              with:
+                go-version: "1.15"
+            - name: Install crane
+              run: |
+                #!/usr/bin/env bash
+
+                set -euo pipefail
+
+                GO111MODULE=on go get -u -ldflags="-s -w" github.com/google/go-containerregistry/cmd/crane
+            - name: Install create-package
+              run: |
+                #!/usr/bin/env bash
+
+                set -euo pipefail
+
+                GO111MODULE=on go get -u -ldflags="-s -w" github.com/paketo-buildpacks/libpak/cmd/create-package
+            - name: Install pack
+              run: |
+                #!/usr/bin/env bash
+
+                set -euo pipefail
+
+                mkdir -p "${HOME}"/bin
+                echo "${HOME}/bin" >> "${GITHUB_PATH}"
+
+                curl \
+                  --location \
+                  --show-error \
+                  --silent \
+                  "https://github.com/buildpacks/pack/releases/download/v${PACK_VERSION}/pack-v${PACK_VERSION}-linux.tgz" \
+                  | tar -C "${HOME}"/bin/ -xzv pack
+              env:
+                PACK_VERSION: 0.14.1
+            - id: version
+              name: Compute Version
+              run: |
+                #!/usr/bin/env bash
+
+                set -euo pipefail
+
+                if [[ ${GITHUB_REF} =~ refs/tags/v([0-9]+\.[0-9]+\.[0-9]+) ]]; then
+                  VERSION=${BASH_REMATCH[1]}
+                elif [[ ${GITHUB_REF} =~ refs/heads/(.+) ]]; then
+                  VERSION=${BASH_REMATCH[1]}
+                else
+                  VERSION=$(git rev-parse --short HEAD)
+                fi
+
+                echo "::set-output name=version::${VERSION}"
+                echo "Selected ${VERSION} from
+                  * ref: ${GITHUB_REF}
+                  * sha: ${GITHUB_SHA}
+                "
+            - name: Create Package
+              run: |
+                #!/usr/bin/env bash
+
+                set -euo pipefail
+
+                if [[ "${INCLUDE_DEPENDENCIES}" == "true" ]]; then
+                  create-package \
+                    --cache-location "${HOME}"/carton-cache \
+                    --destination "${HOME}"/buildpack \
+                    --include-dependencies \
+                    --version "${VERSION}"
+                else
+                  create-package \
+                    --destination "${HOME}"/buildpack \
+                    --version "${VERSION}"
+                fi
+
+                [[ -e package.toml ]] && cp package.toml "${HOME}"/package.toml
+                printf '[buildpack]\nuri = "%s"' "${HOME}"/buildpack >> "${HOME}"/package.toml
+              env:
+                INCLUDE_DEPENDENCIES: "false"
+                VERSION: ${{ steps.version.outputs.version }}
+            - id: package
+              name: Package Buildpack
+              run: |
+                #!/usr/bin/env bash
+
+                set -euo pipefail
+
+                if [[ -n "${PUBLISH+x}" ]]; then
+                  pack package-buildpack \
+                    "${PACKAGE}:${VERSION}" \
+                    --config "${HOME}"/package.toml \
+                    --publish
+
+                  echo "::set-output name=digest::$(crane digest "${PACKAGE}:${VERSION}")"
+                else
+                  pack package-buildpack \
+                    "${PACKAGE}:${VERSION}" \
+                    --config "${HOME}"/package.toml
+                fi
+              env:
+                PACKAGE: gcr.io/projectriff/java-function
+                PUBLISH: "true"
+                VERSION: ${{ steps.version.outputs.version }}
+            - name: Update release with digest
+              run: |
+                #!/usr/bin/env bash
+
+                set -euo pipefail
+
+                PAYLOAD=$(cat "${GITHUB_EVENT_PATH}")
+
+                RELEASE_ID=$(jq -n -r --argjson PAYLOAD "${PAYLOAD}" '$PAYLOAD.release.id')
+                RELEASE_TAG_NAME=$(jq -n -r --argjson PAYLOAD "${PAYLOAD}" '$PAYLOAD.release.tag_name')
+                RELEASE_NAME=$(jq -n -r --argjson PAYLOAD "${PAYLOAD}" '$PAYLOAD.release.name')
+                RELEASE_BODY=$(jq -n -r --argjson PAYLOAD "${PAYLOAD}" '$PAYLOAD.release.body')
+
+                gh api \
+                  --method PATCH \
+                  "/repos/:owner/:repo/releases/${RELEASE_ID}" \
+                  --field "tag_name=${RELEASE_TAG_NAME}" \
+                  --field "name=${RELEASE_NAME}" \
+                  --field "body=${RELEASE_BODY//<!-- DIGEST PLACEHOLDER -->/\`${DIGEST}\`}"
+              env:
+                DIGEST: ${{ steps.package.outputs.digest }}
+                GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/minimal-labels.yml

@@ -0,0 +1,29 @@
+name: Minimal Labels
+"on":
+    pull_request:
+        types:
+            - synchronize
+            - reopened
+            - labeled
+            - unlabeled
+jobs:
+    semver:
+        name: Minimal Semver Labels
+        runs-on:
+            - ubuntu-latest
+        steps:
+            - uses: mheap/github-action-required-labels@v1
+              with:
+                count: 1
+                labels: semver:major, semver:minor, semver:patch
+                mode: exactly
+    type:
+        name: Minimal Type Labels
+        runs-on:
+            - ubuntu-latest
+        steps:
+            - uses: mheap/github-action-required-labels@v1
+              with:
+                count: 1
+                labels: type:bug, type:dependency-upgrade, type:documentation, type:enhancement, type:question, type:task
+                mode: exactly

.github/workflows/synchronize-labels.yml

@@ -0,0 +1,17 @@
+name: Synchronize Labels
+"on":
+    push:
+        branches:
+            - main
+        paths:
+            - .github/labels.yml
+jobs:
+    synchronize:
+        name: Synchronize Labels
+        runs-on:
+            - ubuntu-latest
+        steps:
+            - uses: actions/checkout@v2
+            - uses: micnncim/action-label-syncer@v1
+              env:
+                GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}