diff --git a/.github/workflows/dockerimage.yml b/.github/workflows/dockerimage.yml index d45765a..9d21e20 100644 --- a/.github/workflows/dockerimage.yml +++ b/.github/workflows/dockerimage.yml @@ -8,7 +8,8 @@ on: - cron: '0 0 * * 0' workflow_dispatch: -permissions: {} +permissions: + contents: write jobs: build: @@ -48,3 +49,18 @@ jobs: - name: Test the Docker image working-directory: ${{ env.IMAGE }} run: docker compose -f docker-compose.test.yml run sut + - name: Set RELEASE + if: github.event_name != 'pull_request' + run: | + # shellcheck disable=SC2086 + RC="$(\grep ${IMAGE}/Dockerfile -e '^FROM' | sed -e 's/^.*://')" + if [[ "${RC}" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] && ! git show-ref --tags --verify --quiet "refs/tags/v${RC}" ; then + echo "RELEASE=${RC}" >> "${GITHUB_ENV}" + fi + - name: Trigger release + if: env.RELEASE == true + uses: actions/create-release@v1 + env: + GITHUB_TOKEN: ${{ secrets.RELEASE_TOKEN }} + with: + tag_name: v${{ env.RELEASE }} diff --git a/.github/workflows/dockerrealase.yml b/.github/workflows/dockerrealase.yml new file mode 100644 index 0000000..d36ed7e --- /dev/null +++ b/.github/workflows/dockerrealase.yml @@ -0,0 +1,43 @@ +--- +name: Docker Release + +on: + release: + types: [published] + workflow_dispatch: + +jobs: + build: + runs-on: ubuntu-latest + steps: + - name: Set IMAGE + run: echo "IMAGE=${GITHUB_REPOSITORY#*/docker-}" >> "${GITHUB_ENV}" + - uses: actions/checkout@v4 + - uses: docker/setup-qemu-action@v3 + - uses: docker/setup-buildx-action@v3 + - uses: docker/metadata-action@v5 + id: meta + with: + images: ${{ github.repository_owner }}/${{ env.IMAGE }} + tags: | + type=schedule + type=ref,event=branch + type=ref,event=pr + type=semver,pattern={{version}} + type=semver,pattern={{major}}.{{minor}} + type=semver,pattern={{major}} + type=sha + - uses: docker/login-action@v3 + if: github.event_name != 'pull_request' + with: + username: ${{ secrets.DOCKERHUB_USERNAME }} + password: ${{ secrets.DOCKERHUB_TOKEN }} + - uses: docker/build-push-action@v5 + with: + context: ${{ env.IMAGE }} + platforms: linux/amd64,linux/arm64 + pull: true + push: true + sbom: true + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }}