Add publish task

andifalk · Oct 8, 2023 · bb85eef · bb85eef
1 parent 63329f4
commit bb85eef
Showing 1 changed file with 18 additions and 0 deletions.
diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -19,3 +19,21 @@ jobs:
         run: mvn --batch-mode deploy
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USER }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+      - name: Build image
+        run: docker build . --file Dockerfile --platform linux/amd64 --tag "andifalk/supply-chain-security:${{ tag_name }}"
+      - name: Push image
+        run: docker push "andifalk/supply-chain-security:${{ tag_name }}"
+      - name: Install Cosign
+        uses: sigstore/[email protected]
+      - name: Sign image with a key
+        run: cosign sign --yes --key env://COSIGN_PRIVATE_KEY "${TAGS}@${DIGEST}"
+        env:
+          TAGS: ${{ tag_name }}
+          COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
+          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
+          DIGEST: ${{ steps.build-image.outputs.digest }}