ci(test-optimization): cache webdriverio browser tools

Author: rochdev

.github/webdriverio/Dockerfile

@@ -0,0 +1,6 @@
+ARG SELENIUM_IMAGE
+FROM ${SELENIUM_IMAGE}
+
+RUN apt-get update && apt-get install -y --no-install-recommends ffmpeg \
+    && ffmpeg -hide_banner -encoders 2>/dev/null | grep -Eq '[[:space:]]libvpx[[:space:]]' \
+    && rm -rf /var/lib/apt/lists/*

.github/workflows/test-optimization.yml

@@ -232,6 +232,7 @@ jobs:
           flags: test-optimization-mocha-${{ matrix.version }}-${{ matrix.mocha-version }}
 
   integration-webdriverio:
+    needs: selenium-image
     strategy:
       fail-fast: false
       matrix:
@@ -253,6 +254,11 @@ jobs:
       integration-webdriverio (${{ matrix.webdriverio-version }},
       node-${{ matrix.node-version }}, ${{ matrix.spec }})
     runs-on: ubuntu-latest
+    container:
+      image: ${{ needs.selenium-image.outputs.webdriverio_image }}
+      credentials:
+        username: ${{ github.actor }}
+        password: ${{ secrets.GITHUB_TOKEN }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - uses: ./.github/actions/node
@@ -271,8 +277,10 @@ jobs:
       - name: Clear uploaded instrumentation JUnit reports
         if: "!cancelled() && steps.webdriverio_instrumentation_upload.outcome == 'success'"
         run: rm -f ./*.xml
-      - name: Install FFmpeg for video recording and validation
-        run: sudo apt-get update && sudo apt-get install -y ffmpeg
+      - name: Configure Git safe directory
+        # The WebdriverIO job runs in a container where the checkout can be owned by a different UID.
+        # Git rejects metadata commands in that checkout unless the workspace is marked as safe.
+        run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
       - name: Use installed Chrome and ChromeDriver
         if: matrix.spec == 'webdriverio'
         run: |
@@ -382,21 +390,25 @@ jobs:
           flags: test-optimization-cucumber-${{ matrix.version }}-${{ matrix.cucumber-version }}
 
   selenium-image:
-    name: Ensure Selenium Docker image
+    name: Ensure browser Docker images
     runs-on: ubuntu-latest
     permissions:
       contents: read
       packages: write
     outputs:
       image: ${{ steps.image.outputs.image }}
+      webdriverio_image: ${{ steps.image.outputs.webdriverio_image }}
     steps:
       - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
       - name: Determine image tag
         id: image
         run: |
-          DOCKER_HASH=$(sha256sum .github/selenium/Dockerfile | cut -c1-8)
-          IMAGE="ghcr.io/datadog/dd-trace-js/selenium-tools:${DOCKER_HASH}"
+          SELENIUM_HASH=$(sha256sum .github/selenium/Dockerfile | cut -c1-8)
+          WEBDRIVERIO_HASH=$(sha256sum .github/webdriverio/Dockerfile | cut -c1-8)
+          IMAGE="ghcr.io/datadog/dd-trace-js/selenium-tools:${SELENIUM_HASH}"
+          WEBDRIVERIO_IMAGE="ghcr.io/datadog/dd-trace-js/webdriverio-tools:${SELENIUM_HASH}-${WEBDRIVERIO_HASH}"
           echo "image=$IMAGE" >> "$GITHUB_OUTPUT"
+          echo "webdriverio_image=$WEBDRIVERIO_IMAGE" >> "$GITHUB_OUTPUT"
       - name: Log in to GHCR
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
@@ -413,6 +425,18 @@ jobs:
             docker build -t "${IMAGE}" .github/selenium
             docker push "${IMAGE}"
           fi
+      - name: Ensure WebdriverIO image
+        env:
+          SELENIUM_IMAGE: ${{ steps.image.outputs.image }}
+          WEBDRIVERIO_IMAGE: ${{ steps.image.outputs.webdriverio_image }}
+        run: |
+          if docker manifest inspect "${WEBDRIVERIO_IMAGE}" > /dev/null 2>&1; then
+            echo "Image ${WEBDRIVERIO_IMAGE} already exists, skipping build"
+          else
+            docker build --build-arg SELENIUM_IMAGE="${SELENIUM_IMAGE}" \
+              -t "${WEBDRIVERIO_IMAGE}" .github/webdriverio
+            docker push "${WEBDRIVERIO_IMAGE}"
+          fi
 
   integration-selenium:
     needs: selenium-image