aboutsummaryrefslogtreecommitdiffstats
path: root/.github/workflows/docker.yaml
diff options
context:
space:
mode:
authorterminaldweller <devi@terminaldweller.com>2024-05-13 11:16:10 +0000
committerterminaldweller <devi@terminaldweller.com>2024-05-13 11:16:10 +0000
commit314af5ef0f5fa72a841843dfacaa93e3b8d49413 (patch)
tree9609b91fa995f811fb995b13b2e8c5372ceefa9a /.github/workflows/docker.yaml
parentenabled the global format option for girc, also added a bunch more config opt... (diff)
downloadmilla-314af5ef0f5fa72a841843dfacaa93e3b8d49413.tar.gz
milla-314af5ef0f5fa72a841843dfacaa93e3b8d49413.zip
added a gtihub action for pushing to dockerhub
Diffstat (limited to '')
-rw-r--r--.github/workflows/docker.yaml40
1 files changed, 40 insertions, 0 deletions
diff --git a/.github/workflows/docker.yaml b/.github/workflows/docker.yaml
new file mode 100644
index 0000000..4153da3
--- /dev/null
+++ b/.github/workflows/docker.yaml
@@ -0,0 +1,40 @@
+name: Publish Docker image
+on:
+ release:
+ types: [published]
+jobs:
+ push_to_registry:
+ name: Push Docker image to Docker Hub
+ runs-on: alpine-3.19
+ permissions:
+ packages: write
+ contents: read
+ attestations: write
+ steps:
+ - name: Check out the repo
+ uses: actions/checkout@v4
+ - name: Log in to Docker Hub
+ uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a
+ with:
+ username: ${{ secrets.DOCKER_USERNAME }}
+ password: ${{ secrets.DOCKER_PASSWORD }}
+ - name: Extract metadata (tags, labels) for Docker
+ id: meta
+ uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
+ with:
+ images: terminaldweller/milla
+ - name: Build and push Docker image
+ id: push
+ uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
+ with:
+ context: .
+ file: ./Dockerfile
+ push: true
+ tags: ${{ steps.meta.outputs.tags }}
+ labels: ${{ steps.meta.outputs.labels }}
+ - name: Generate artifact attestation
+ uses: actions/attest-build-provenance@v1
+ with:
+ subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+ subject-digest: ${{ steps.push.outputs.digest }}
+ push-to-registry: true