diff options
| author | terminaldweller <devi@terminaldweller.com> | 2024-05-21 13:19:05 +0000 |
|---|---|---|
| committer | terminaldweller <devi@terminaldweller.com> | 2024-05-21 13:19:05 +0000 |
| commit | 96ac3a3e4564fff61094f8843a63395d7068fbd7 (patch) | |
| tree | 57fe1819073e059427680ed7cf95d16bdeb98c8f | |
| parent | update (diff) | |
| download | docker-bitlbee-libpurple-96ac3a3e4564fff61094f8843a63395d7068fbd7.tar.gz docker-bitlbee-libpurple-96ac3a3e4564fff61094f8843a63395d7068fbd7.zip | |
docker build action
| -rw-r--r-- | .github/workflows/docker.yaml | 47 |
1 files changed, 47 insertions, 0 deletions
diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml new file mode 100644 index 0000000..ef91aff --- /dev/null +++ b/.github/workflows/docker.yaml @@ -0,0 +1,47 @@ +name: Publish Docker image +on: + release: + types: [published] + push: + branches: [ "main" ] +jobs: + push_to_registry: + name: Push Docker image to Docker Hub + runs-on: ubuntu-latest + permissions: + packages: write + contents: read + attestations: write + id-token: write + steps: + - name: Check out the repo + uses: actions/checkout@v4 + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v3 + - name: Log in to Docker Hub + uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a + with: + username: ${{ secrets.DOCKER_USERNAME }} + password: ${{ secrets.DOCKER_PASSWORD }} + - name: Extract metadata (tags, labels) for Docker + id: meta + uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7 + with: + images: terminaldweller/milla + - name: Build and push Docker image + id: push + uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671 + with: + context: . + file: ./Dockerfile.debian + push: true + sbom: true + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }} + provenance: mode=max + # - name: Generate artifact attestation + # uses: actions/attest-build-provenance@v1 + # with: + # subject-name: index.docker.io/milla + # subject-digest: ${{ steps.push.outputs.digest }} + # push-to-registry: true |