diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml new file mode 100644 index 0000000..7b8262d --- /dev/null +++ b/.github/workflows/docker.yml @@ -0,0 +1,92 @@ +name: Docker Automated Builds + +on: + push: + branches: + - aurora + tags: + - "v*.*.*" + pull_request: + branches: + - aurora + schedule: + - cron: "0 0 * * 0" + +jobs: + docker: + name: Docker Build and Push + runs-on: ubuntu-22.04 + steps: + - name: Checkout + uses: actions/checkout@v4 + + - name: Docker meta + id: meta + uses: docker/metadata-action@v5 + with: + images: | + 0x61nas/aarty + ghcr.io/${{ github.repository_owner }}/aarty/aarty + tags: | + type=schedule + type=ref,event=branch + type=ref,event=pr + type=sha + type=raw,value=latest + type=semver,pattern={{version}} + + - name: Set up QEMU + uses: docker/setup-qemu-action@v3 + with: + platforms: arm64 + + - name: Set up Docker Buildx + id: buildx + uses: docker/setup-buildx-action@v3 + + - name: Cache Docker layers + uses: actions/cache@v4 + with: + path: /tmp/.buildx-cache + key: ${{ runner.os }}-buildx-${{ github.sha }} + restore-keys: | + ${{ runner.os }}-buildx- + + - name: Login to Docker Hub + if: github.event_name != 'pull_request' + uses: docker/login-action@v3 + with: + username: anaselgarhy + password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }} + + - name: Login to GHCR + if: github.event_name != 'pull_request' + uses: docker/login-action@v3 + with: + registry: ghcr.io + username: ${{ github.repository_owner }} + password: ${{ secrets.GITHUB_TOKEN }} + + - name: Build and push + id: docker_build + uses: docker/build-push-action@v5 + with: + context: ./ + file: ./Dockerfile + platforms: linux/amd64,linux/arm64 + builder: ${{ steps.buildx.outputs.name }} + push: ${{ github.event_name != 'pull_request' }} + tags: ${{ steps.meta.outputs.tags }} + sbom: true + provenance: true + labels: ${{ steps.meta.outputs.labels }} + cache-from: type=local,src=/tmp/.buildx-cache + cache-to: type=local,dest=/tmp/.buildx-cache + + - name: Scan the image + uses: anchore/sbom-action@v0 + with: + image: ghcr.io/${{ github.repository_owner }}/aarty/aarty + + - name: Image digest + run: echo ${{ steps.docker_build.outputs.digest }}