Container Image Builds #169
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Container Image Builds | |
| on: | |
| push: | |
| branches: [main] | |
| tags: ["v*"] | |
| pull_request: | |
| branches: [main] | |
| workflow_dispatch: | |
| jobs: | |
| production: | |
| name: Production Images | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v4 | |
| - name: 'set IS_VERSION_TAG' | |
| run: | | |
| echo "IS_VERSION_TAG=${{ github.ref_type == 'tag' && startsWith(github.ref_name, 'v') }}" >> $GITHUB_ENV | |
| # set defaults | |
| echo "IS_LATEST_TAG=false" >> $GITHUB_ENV | |
| - name: 'set IS_LATEST_TAG' | |
| if: ( env.IS_VERSION_TAG ) | |
| run: | | |
| # find the latest version that is not ourself | |
| export LATEST_VERSION=$(git tag -l | grep -v '${{ github.ref_name }}' | sort -r --version-sort) | |
| # get major minor patch versions | |
| IFS='.' read -r latest_major latest_minor latest_patch << EOF | |
| $LATEST_VERSION | |
| EOF | |
| IFS='.' read -r tag_major tag_minor tag_patch << EOF | |
| ${{ github.ref_name }} | |
| EOF | |
| # remove leading v | |
| latest_major=$(echo $latest_major | cut -c2-) | |
| tag_major=$(echo $tag_major | cut -c2-) | |
| echo "$tag_major >= $latest_major" | |
| if [[ $tag_major -ge $latest_major && ($tag_minor -ne 0 || $tag_patch -ne 0) ]]; then | |
| # set this tag to latest and stable | |
| echo "IS_LATEST_TAG=true" >> $GITHUB_ENV | |
| fi | |
| - name: 'Setup meta information (IS_VERSION_TAG: ${{ env.IS_VERSION_TAG }}, IS_LATEST_TAG: ${{ env.IS_LATEST_TAG }} )' | |
| id: meta | |
| uses: docker/metadata-action@v5 | |
| with: | |
| images: ${{ github.repository }} | |
| labels: | | |
| org.opencontainers.image.vendor=Greenbone | |
| org.opencontainers.image.base.name=debian:stable-slim | |
| flavor: latest=false # no auto latest container tag for git tags | |
| tags: | | |
| # when IS_LATEST_TAG is set create a stable and a latest tag | |
| type=raw,value=latest,enable=${{ env.IS_LATEST_TAG }} | |
| type=raw,value=stable,enable=${{ env.IS_LATEST_TAG }} | |
| # if tag version is set than create a version tags | |
| type=semver,pattern={{version}},enable=${{ env.IS_VERSION_TAG }} | |
| type=semver,pattern={{major}}.{{minor}},enable=${{ env.IS_VERSION_TAG }} | |
| type=semver,pattern={{major}},enable=${{ env.IS_VERSION_TAG }} | |
| # if we are on the main branch set edge | |
| type=edge,branch=main | |
| # use branch-sha otherwise for pushes to branches other then main (will not be uploaded) | |
| type=raw,value={{branch}}-{{sha}},enable=${{ github.ref_type == 'branch' && github.event_name == 'push' && github.ref_name != 'main' }} | |
| # use pr-$PR_ID for pull requests (will not be uploaded) | |
| type=ref,event=pr | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v3 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v3 | |
| - name: Login to Docker Registry | |
| if: github.event_name != 'pull_request' | |
| uses: docker/login-action@v3 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_TOKEN }} | |
| - name: Build and push Container image | |
| uses: docker/build-push-action@v5 | |
| with: | |
| context: . | |
| push: ${{ github.event_name != 'pull_request' && (github.ref_type == 'tag' || github.ref_name == 'main') }} | |
| file: .docker/prod.Dockerfile | |
| platforms: linux/amd64,linux/arm64 | |
| tags: ${{ steps.meta.outputs.tags }} | |
| labels: ${{ steps.meta.outputs.labels }} |