4e80dd009a
That PR got hard to review and confidently merge, so I'm cherry-picking some of the good ideas from it in a format that feels more comfortable to me. Thanks @vlakoff for the original PR! Co-authored-by: vlakoff <544424+vlakoff@users.noreply.github.com>
60 lines
1.8 KiB
YAML
60 lines
1.8 KiB
YAML
name: docker
|
||
on:
|
||
push:
|
||
branches:
|
||
- master
|
||
tags:
|
||
- v*.*.*
|
||
pull_request:
|
||
types:
|
||
- opened
|
||
- synchronize
|
||
workflow_dispatch:
|
||
inputs:
|
||
use_cache:
|
||
description: "Use build cache"
|
||
required: true
|
||
type: boolean
|
||
default: true
|
||
|
||
concurrency:
|
||
# If we ever end up with two concurrent Docker build jobs for the same commit
|
||
# and same versioning context, the former should be cancelled
|
||
group: docker-${{ github.sha }}-${{ github.ref_type }}-${{ github.head_ref }}
|
||
cancel-in-progress: true
|
||
|
||
jobs:
|
||
build:
|
||
uses: docker/github-builder/.github/workflows/build.yml@v1
|
||
permissions:
|
||
contents: read
|
||
packages: write
|
||
id-token: write
|
||
attestations: write
|
||
with:
|
||
output: image
|
||
platforms: linux/amd64,linux/arm64
|
||
push: ${{ github.event_name != 'pull_request' }}
|
||
cache: ${{ github.event_name != 'workflow_dispatch' || inputs.use_cache }}
|
||
# We don't sign the image because ghcr.io doesn't support OCI Referrers API yet, and the fallback relies on pushing new tags on each build
|
||
# https://github.com/docker/github-builder/issues/109#issuecomment-3885082486
|
||
# https://github.com/opencontainers/distribution-spec/blob/v1.1.0/spec.md#backwards-compatibility
|
||
sign: false
|
||
sbom: true
|
||
meta-images: ghcr.io/${{ github.repository }}
|
||
meta-tags: |
|
||
type=ref,event=branch
|
||
type=ref,event=pr
|
||
type=semver,pattern={{raw}}
|
||
set-meta-annotations: true
|
||
set-meta-labels: true
|
||
labels: |
|
||
org.opencontainers.image.title=Oxipng
|
||
annotations: |
|
||
org.opencontainers.image.title=Oxipng
|
||
|
||
secrets:
|
||
registry-auths: |
|
||
- registry: ghcr.io
|
||
username: ${{ github.actor }}
|
||
password: ${{ secrets.GITHUB_TOKEN }}
|