netboxlabs · leoparente · Jun 2, 2026 · Jun 2, 2026 · Jun 2, 2026 · Jun 2, 2026
@@ -0,0 +1,32 @@
+name: gNMI Discovery - lint
+on:
+  push:
+    branches-ignore:
+      - release
+    paths:
+      - "gnmi-discovery/**"
+      - "!gnmi-discovery/docker/**"
+  pull_request:
+    paths:
+      - "gnmi-discovery/**"
+      - "!gnmi-discovery/docker/**"
+
+permissions:
+  contents: read
+
+jobs:
+  golangci:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Setup Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: 'gnmi-discovery/go.mod'
+      - name: Lint
+        uses: golangci/golangci-lint-action@db582008a42febd596419635a5abc9d9815daa9c # v9.2.1
+        with:
+          version: v2.11.3
+          working-directory: gnmi-discovery
+          args: --config ../.github/golangci.yaml
@@ -0,0 +1,248 @@
+name: gNMI Discovery - release
+on:
+  workflow_dispatch:
+  push:
+    branches: [ release ]
+    paths:
+      - "gnmi-discovery/**"
+      - "!gnmi-discovery/docker/**"
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: false
+
+env:
+  GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+  SEMANTIC_RELEASE_PACKAGE: ${{ github.repository }}
+  APP_NAME: gnmi-discovery
+
+permissions:
+  contents: write
+  issues: write
+  pull-requests: write
+
+jobs:
+  get-next-version:
+    name: Semantic release get next version
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v6
+        with:
+          node-version: "lts/*"
+      - name: Write package.json
+        run: |
+          cat > "${{ env.APP_NAME }}/package.json" <<'EOF'
+          {
+            "name": "${{ env.APP_NAME }}",
+            "version": "1.0.0",
+            "devDependencies": {
+              "semantic-release": "^25.0.0-beta.6",
+              "semantic-release-export-data": "^1.0.1",
+              "semantic-release-monorepo": "^8.0.0",
+              "@semantic-release/changelog": "^6.0.3"
+            }
+          }
+          EOF
+      - name: Write .releaserc.json
+        run: |
+          cat > "${{ env.APP_NAME }}/.releaserc.json" <<'EOF'
+          {
+            "extends": "semantic-release-monorepo",
+            "branches": "release",
+            "repositoryUrl": "https://github.com/netboxlabs/orb-discovery",
+            "debug": "true",
+            "tagFormat": "${{ env.APP_NAME }}/v${version}",
+            "plugins": [
+              ["semantic-release-export-data"],
+              ["@semantic-release/commit-analyzer", {
+                "releaseRules": [
+                  { "breaking": true, "release": "major" },
+                  { "type": "fix", "release": "patch" },
+                  { "type": "feat", "release": "minor" },
+                  { "type": "perf", "release": "patch" },
+                  { "type": "chore", "scope": "deps", "release": "patch" }
+                ]
+              }],
+              "@semantic-release/release-notes-generator",
+              [
+                "@semantic-release/changelog",
+                {
+                  "changelogFile": "CHANGELOG.md",
+                  "changelogTitle": "# Semantic Versioning Changelog"
+                }
+              ],
+              [
+                "@semantic-release/github",
+                {
+                  "assets": [
+                    {
+                      "path": "release/**"
+                    }
+                  ]
+                }
+              ]
+            ]
+          }
+          EOF
+      - name: setup semantic-release
+        working-directory: ${{ env.APP_NAME }}
+        run: npm install --legacy-peer-deps
+      - name: release dry-run
+        working-directory: ${{ env.APP_NAME }}
+        env:
+          SLACK_WEBHOOK: ${{ secrets.SLACK_SEMANTIC_RELEASE_WEBHOOK }}
+        run: npx semantic-release --debug --dry-run
+        id: get-next-version
+      - name: Set short sha output
+        id: short-sha
+        run: echo "short-sha=${GITHUB_SHA::7}" >> "$GITHUB_OUTPUT"
+      - name: Set release version
+        id: release-version
+        run: |
+          echo "release-version=$(echo '${{ steps.get-next-version.outputs.new-release-version }}' | sed -E 's|^${{ env.APP_NAME }}[-/]||; s|^v||')" >> "$GITHUB_OUTPUT"
+    outputs:
+      new-release-published: ${{ steps.get-next-version.outputs.new-release-published }}
+      new-release-version: ${{ steps.release-version.outputs.release-version }}
+      short-sha: ${{ steps.short-sha.outputs.short-sha }}
+
+  confirm-version:
+    name: Next version ${{ needs.get-next-version.outputs.new-release-version }}
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    needs: get-next-version
+    if: needs.get-next-version.outputs.new-release-published == 'true'
+    steps:
+      - uses: actions/checkout@v6
+      - run: echo "The new release version is ${{ needs.get-next-version.outputs.new-release-version }} commit ${{ needs.get-next-version.outputs.short-sha }}"
+
+  build:
+    name: Build
+    needs: get-next-version
+    runs-on: ubuntu-latest
+    strategy:
+      fail-fast: false
+    if: needs.get-next-version.outputs.new-release-published == 'true'
+    env:
+      BUILD_VERSION: ${{ needs.get-next-version.outputs.new-release-version }}
+      BUILD_COMMIT: ${{ needs.get-next-version.outputs.short-sha }}
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
+      - name: Extract Go version from go.mod
+        run: echo "GO_VERSION=$(grep '^go ' gnmi-discovery/go.mod | awk '{print $2}')" >> $GITHUB_ENV
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Set build info
+        run: |
+          echo $BUILD_COMMIT > ./gnmi-discovery/version/BUILD_COMMIT.txt
+          echo $BUILD_VERSION > ./gnmi-discovery/version/BUILD_VERSION.txt
+
+      # Build only — gnmi-discovery is experimental and has no DockerHub repo yet,
+      # so push is disabled. This still validates the multi-arch image build.
+      # Flip push to true (and ensure netboxlabs/gnmi-discovery exists) to publish.
+      - name: Build image
+        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
+        with:
+          context: gnmi-discovery
+          file: gnmi-discovery/docker/Dockerfile
+          platforms: linux/amd64, linux/arm64
+          push: false
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          tags: |
+            netboxlabs/gnmi-discovery:latest
+            netboxlabs/gnmi-discovery:${{ env.BUILD_VERSION }}
+          build-args: |
+            GO_VERSION=${{ env.GO_VERSION }}
+
+  semantic-release:
+    name: Semantic release
+    needs: build
+    runs-on: ubuntu-latest
+    timeout-minutes: 5
+    steps:
+      - uses: actions/checkout@v6
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v6
+        with:
+          node-version: "lts/*"
+      - name: Write package.json
+        run: |
+          cat > "${{ env.APP_NAME }}/package.json" <<'EOF'
+          {
+            "name": "${{ env.APP_NAME }}",
+            "version": "1.0.0",
+            "devDependencies": {
+              "semantic-release": "^25.0.0-beta.6",
+              "semantic-release-export-data": "^1.0.1",
+              "semantic-release-monorepo": "^8.0.0",
+              "@semantic-release/changelog": "^6.0.3"
+            }
+          }
+          EOF
+      - name: Write .releaserc.json
+        run: |
+          cat > "${{ env.APP_NAME }}/.releaserc.json" <<'EOF'
+          {
+            "extends": "semantic-release-monorepo",
+            "branches": "release",
+            "repositoryUrl": "https://github.com/netboxlabs/orb-discovery",
+            "debug": "true",
+            "tagFormat": "${{ env.APP_NAME }}/v${version}",
+            "plugins": [
+              ["semantic-release-export-data"],
+              ["@semantic-release/commit-analyzer", {
+                "releaseRules": [
+                  { "breaking": true, "release": "major" },
+                  { "type": "fix", "release": "patch" },
+                  { "type": "feat", "release": "minor" },
+                  { "type": "perf", "release": "patch" },
+                  { "type": "chore", "scope": "deps", "release": "patch" }
+                ]
+              }],
+              "@semantic-release/release-notes-generator",
+              [
+                "@semantic-release/changelog",
+                {
+                  "changelogFile": "CHANGELOG.md",
+                  "changelogTitle": "# Semantic Versioning Changelog"
+                }
+              ],
+              [
+                "@semantic-release/github",
+                {
+                  "assets": [
+                    {
+                      "path": "release/**"
+                    }
+                  ]
+                }
+              ]
+            ]
+          }
+          EOF
+      - name: setup semantic-release
+        working-directory: ${{ env.APP_NAME }}
+        run: npm install --legacy-peer-deps
+      - name: Release
+        working-directory: ${{ env.APP_NAME }}
+        env:
+          SLACK_WEBHOOK: ${{ secrets.SLACK_OBSERVABILITY_RELEASE_WEBHOOK }}
+        run: npx semantic-release --debug
@@ -0,0 +1,72 @@
+name: gNMI Discovery - test
+on:
+  push:
+    branches-ignore:
+      - release
+    paths:
+      - "gnmi-discovery/**"
+      - "!gnmi-discovery/docker/**"
+  pull_request:
+    paths:
+      - "gnmi-discovery/**"
+      - "!gnmi-discovery/docker/**"
+
+concurrency:
+  group: ${{ github.workflow }}
+  cancel-in-progress: false
+
+permissions:
+  contents: write
+  pull-requests: write
+
+jobs:
+  go-test:
+    runs-on: ubuntu-latest
+    timeout-minutes: 10
+    defaults:
+      run:
+        working-directory: gnmi-discovery
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+      - name: Setup Go
+        uses: actions/setup-go@v6
+        with:
+          go-version-file: 'gnmi-discovery/go.mod'
+      - name: Run go build
+        run: go build ./...
+      - name: Install additional dependencies
+        run: |
+          make install-dev-tools
+      - name: Run go test
+        id: go-test
+        run: |
+          make test-coverage
+          echo 'coverage-report<<EOF' >> $GITHUB_OUTPUT
+          cat .coverage/test-report.md >> $GITHUB_OUTPUT
+          echo 'EOF' >> $GITHUB_OUTPUT
+          echo "coverage-total=$(cat .coverage/coverage.txt)" >> $GITHUB_OUTPUT
+      - name: Output Result
+        if: always()
+        run: cat .coverage/test-report.md
+      - name: Find comment
+        # Only on pull_request: on push runs there is no pull_request.number, and
+        # find-comment v4 coerces the empty input to 0 and fails the job.
+        if: github.event_name == 'pull_request'
+        uses: peter-evans/find-comment@b30e6a3c0ed37e7c023ccd3f1db5c6c0b0c23aad # v4.0.0
+        id: existing-comment
+        with:
+          issue-number: ${{ github.event.pull_request.number }}
+          comment-author: 'github-actions[bot]'
+          body-includes: Go test coverage
+      - name: Post comment
+        uses: peter-evans/create-or-update-comment@e8674b075228eee787fea43ef493e45ece1004c9 # v5.0.0
+        if: github.event.pull_request.head.repo.full_name == github.repository
+        with:
+          comment-id: ${{ steps.existing-comment.outputs.comment-id }}
+          issue-number: ${{ github.event.pull_request.number }}
+          body: |
+            Go test coverage
+            ${{ steps.go-test.outputs.coverage-report }}
+            Total coverage: ${{ steps.go-test.outputs.coverage-total }}%
+          edit-mode: replace
@@ -5,4 +5,5 @@ Orb discovery backends collection
 - [device-discovery](./device-discovery/README.md) - Device Discovery Backend that uses [NAPALM](https://github.com/napalm-automation/napalm) Drivers.
 - [network-discovery](./network-discovery/README.md) - Network Discovery Backend which is a wrapper over [NMAP](https://nmap.org/) scanner.
 - [worker](./worker/README.md) - A Worker Backend that allows to run custom implementation as part of Orb Agent.
-- [snmp-discover](./snmp-discovery/README.md) - Device discovery that uses SNMP
+- [snmp-discover](./snmp-discovery/README.md) - Device discovery that uses SNMP
+- [gnmi-discovery](./gnmi-discovery/README.md) - **(experimental)** Event-driven device discovery that uses [gNMI](https://github.com/openconfig/gnmi) subscriptions over [OpenConfig](https://www.openconfig.net/) models.