Skip to content

Docker Pub

Docker Pub #114

Workflow file for this run

name: Docker Pub
on:
workflow_dispatch:
schedule:
- cron: "0 0 * * *"
push:
tags:
- 'v*.*.*'
jobs:
build:
name: Buid and push Docker image to GitHub Container registry
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
attestations: write
id-token: write
steps:
- name: Checkout the repository
uses: actions/checkout@v4
- name: Get current date
id: date
run: echo "::set-output name=date::$(date +'%Y%m%d')"
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Login to GitHub Container Registry
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
password: ${{ secrets.GH_TOKEN }}
- name: Build Nightly Meta
run: |
echo "DEVELOPMENT_TAG=ghcr.io/barelyhuman/goblin:nightly-${{ steps.date.outputs.date }}" >> $GITHUB_ENV
- name: Build Release Meta
run: |
echo "RELEASE_TAG=ghcr.io/barelyhuman/goblin:${{ github.ref_name }}" >> $GITHUB_ENV
if: github.ref_type == 'tag'
- name: Build and push nightly
uses: docker/build-push-action@v5
id: push
env:
REGISTRY: ghcr.io
OWNER: ${{ github.repository_owner }}
IMAGE_NAME: ${{ github.repository }}
with:
context: .
file: Dockerfile
platforms: linux/amd64,linux/arm64
push: true
tags: $DEVELOPMENT_TAG
- name: Build and push nightly
if: github.ref_type == 'tag'
uses: docker/build-push-action@v5
id: pushRelease
env:
REGISTRY: ghcr.io
OWNER: ${{ github.repository_owner }}
IMAGE_NAME: ${{ github.repository }}
with:
context: .
file: Dockerfile
platforms: linux/amd64,linux/arm64
push: true
tags: $RELEASE_TAG
- name: Generate artifact attestation
uses: actions/attest-build-provenance@v1
with:
subject-name: ghcr.io/barelyhuman/goblin
subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true
- name: Generate artifact attestation
if: github.ref_type == 'tag'
uses: actions/attest-build-provenance@v1
with:
subject-name: ghcr.io/barelyhuman/goblin
subject-digest: ${{ steps.pushRelease.outputs.digest }}
push-to-registry: true