81 lines
2.3 KiB
YAML
81 lines
2.3 KiB
YAML
name: Build and push dev image
|
|
|
|
on:
|
|
schedule:
|
|
- cron: '15 4 * * *'
|
|
workflow_dispatch:
|
|
|
|
env:
|
|
DOTCLEAR_IMAGE: docker-dotclear
|
|
DOTCLEAR_CANAL: unstable
|
|
DOCKER_NAMESPACE: jcpd
|
|
|
|
jobs:
|
|
do_image:
|
|
name: Build and push dev image
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
packages: write
|
|
contents: read
|
|
attestations: write
|
|
id-token: write
|
|
steps:
|
|
- name: Check out the repo
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Login to Docker Hub
|
|
uses: docker/login-action@v3
|
|
with:
|
|
username: ${{ secrets.DOCKER_USERNAME }}
|
|
password: ${{ secrets.DOCKER_TOKEN }}
|
|
|
|
- name: Log in to Github registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ghcr.io
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: set lower case github repository
|
|
run: |
|
|
echo "GITHUB_REPOSITORY=${REPO,,}" >>${GITHUB_ENV}
|
|
env:
|
|
REPO: '${{ github.repository }}'
|
|
|
|
- name: Build and push image
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
sbom: true
|
|
push: true
|
|
tags: |
|
|
${{ env.DOCKER_NAMESPACE }}/${{ env.DOTCLEAR_IMAGE }}:dev
|
|
ghcr.io/${{ env.GITHUB_REPOSITORY }}:dev
|
|
build-args: CANAL=${{ env.DOTCLEAR_CANAL }}
|
|
platforms: linux/386,linux/amd64,linux/arm/v6,linux/arm/v7,linux/arm64/v8,linux/ppc64le,linux/s390x
|
|
cache-from: type=gha
|
|
cache-to: type=gha,mode=max
|
|
|
|
- name: Docker Scout
|
|
id: docker-scout
|
|
uses: docker/scout-action@v1.16.1
|
|
with:
|
|
command: environment,quickview,cves,recommendations
|
|
image: ${{ env.DOCKER_NAMESPACE }}/${{ env.DOTCLEAR_IMAGE }}:dev
|
|
environment: unstable
|
|
organization: ${{ env.DOCKER_NAMESPACE }}
|
|
write-comment: true
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Send Telegram Message Ok
|
|
uses: appleboy/telegram-action@master
|
|
env:
|
|
GITHUB_CONTEXT: ${{toJSON(github)}}
|
|
with:
|
|
to: ${{ secrets.TELEGRAM_ID }}
|
|
token: ${{ secrets.TELEGRAM_TOKEN }}
|
|
format: markdown
|
|
message: Image __${{ env.DOTCLEAR_IMAGE }}:dev__ successfully generated.
|