docker-build.yml

name: Docker image update

on:
  push:
    branches:
      - "master"
    paths:
      - ".github/workflows/docker-build.yml"
      - "app/**"
      - "Dockerfile-parent"
  schedule:
    - cron: "0 0 * * *"

jobs:
  build:
    runs-on: ubuntu-latest

    env:
      DOCKERFILE: Dockerfile-parent
      GHCR_IMAGE: "ghcr.io/${{ github.repository }}"
      GHCR_IMAGE_TAG_1: "ghcr.io/${{ github.repository }}:v3"
      GHCR_IMAGE_TAG_2: "ghcr.io/${{ github.repository }}:${{ github.sha }}"
      DOCKER_HUB_IMAGE_TAG: "axelop/dart_package_analyzer:v3"
      GHCR_REGISTRY: ghcr.io

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Get labels
        continue-on-error: true
        id: labels
        uses: axel-op/docker-labels-retriever@master
        with:
          image: ${{ env.GHCR_IMAGE_TAG }}
          registry: ${{ env.GHCR_REGISTRY }}

      - name: Check current image
        id: check
        env:
          EVENT: ${{ github.event_name }}
          DART_IMAGE: library/dart
          DART_VERSION: latest
          GIT_FLUTTER: https://github.com/flutter/flutter.git
          FLUTTER_BRANCH: stable
          PANA_DOC: https://pub.dev/api/packages/pana
        run: |
          CURRENT_FLUTTER=$(git ls-remote $GIT_FLUTTER refs/heads/$FLUTTER_BRANCH | cut -f 1)
          CURRENT_PANA=$(curl -s $PANA_DOC | jq -r '.latest.version')
          API_TOKEN=$(curl -s "https://auth.docker.io/token?scope=repository:$DART_IMAGE:pull&service=registry.docker.io" | jq -r '.token')
          CURRENT_DART=$(curl -s -H "Authorization: Bearer $API_TOKEN" -H "Accept: application/vnd.docker.distribution.manifest.v2+json" "https://registry-1.docker.io/v2/$DART_IMAGE/manifests/$DART_VERSION" | jq -r '.config.digest')
          PREVIOUS_FLUTTER=${{ steps.labels.outputs.fluttersha }}
          PREVIOUS_PANA=${{ steps.labels.outputs.panaversion }}
          PREVIOUS_DART=${{ steps.labels.outputs.dartdigest }}
          echo $CURRENT_DART is the sha for ${DART_IMAGE}:${DART_VERSION}
          echo $PREVIOUS_DART is the sha labelled with the Docker image 
          echo $CURRENT_FLUTTER is the latest commit in the $FLUTTER_BRANCH branch of Flutter
          echo $PREVIOUS_FLUTTER is the commit of Flutter on Docker image
          echo $CURRENT_PANA is the latest version of pana
          echo $PREVIOUS_PANA is the version of pana on Docker image
          if [ "$EVENT" = push ] || [ "$CURRENT_FLUTTER" != "$PREVIOUS_FLUTTER" ] || [ "$CURRENT_PANA" != "$PREVIOUS_PANA" ] || [ "$CURRENT_DART" != "$PREVIOUS_DART" ]; then
            SHOULD_PUSH=true
          else
            SHOULD_PUSH=false
          fi
          echo "CURRENT_FLUTTER=$CURRENT_FLUTTER" >> $GITHUB_ENV
          echo "CURRENT_PANA=$CURRENT_PANA" >> $GITHUB_ENV
          echo "CURRENT_DART=$CURRENT_DART" >> $GITHUB_ENV
          echo "should_push=$SHOULD_PUSH" >> "$GITHUB_OUTPUT"

      - name: Build new image
        if: steps.check.outputs.should_push == 'true'
        run: |
          sudo docker build \
            --quiet \
            --label "fluttersha=$CURRENT_FLUTTER" \
            --label "panaversion=$CURRENT_PANA" \
            --label "dartdigest=$CURRENT_DART" \
            --label "org.opencontainers.image.source=https://github.com/${{ github.repository }}" \
            -f $DOCKERFILE \
            -t $GHCR_IMAGE_TAG_1 \
            -t $GHCR_IMAGE_TAG_2 \
            -t $DOCKER_HUB_IMAGE_TAG \
            .

      - name: Test new image
        if: steps.check.outputs.should_push == 'true'
        run: |
          sudo docker run -d -t --name test-container $GHCR_IMAGE_TAG
          sudo docker cp ${GITHUB_WORKSPACE}/test/. test-container:/test
          sudo docker cp $GITHUB_EVENT_PATH test-container:/eventpayload
          sudo docker exec test-container /bin/bash -c "cd /test && git init"
          sudo docker exec -e GITHUB_WORKSPACE=/test -e GITHUB_EVENT_PATH=/eventpayload -e GITHUB_SHA=$GITHUB_SHA -e GITHUB_REPOSITORY=$GITHUB_REPOSITORY -e INPUT_MINANNOTATIONLEVEL=info -e INPUT_GITHUBTOKEN=${{ secrets.GITHUB_TOKEN }} test-container /bin/bash -c "/dart_package_analyzer"

      - name: Push new image
        if: steps.check.outputs.should_push == 'true'
        env:
          GHCR_USERNAME: ${{ github.actor }}
          GHCR_TOKEN: ${{ secrets.GITHUB_TOKEN }}
          DOCKER_HUB_USERNAME: axelop
          DOCKER_HUB_TOKEN: ${{ secrets.DOCKER_TOKEN }}
        run: |
          echo $GHCR_TOKEN | sudo docker login $GHCR_REGISTRY --username=$GHCR_USERNAME --password-stdin
          sudo docker push --all-tags $GHCR_IMAGE
          echo $DOCKER_HUB_TOKEN | sudo docker login --username=$DOCKER_HUB_USERNAME --password-stdin
          sudo docker push $DOCKER_HUB_IMAGE_TAG