Build and push dev image #595
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Build and push dev image | |
| on: | |
| schedule: | |
| - cron: '15 6 * * *' | |
| workflow_dispatch: | |
| env: | |
| DOTCLEAR_IMAGE: docker-dotclear | |
| DOTCLEAR_CANAL: unstable | |
| DOCKER_NAMESPACE: jcpd | |
| jobs: | |
| do_image: | |
| name: Build and push dev image | |
| runs-on: ubuntu-latest | |
| permissions: | |
| packages: write | |
| contents: read | |
| attestations: write | |
| id-token: write | |
| steps: | |
| - name: Check out the repo | |
| uses: actions/checkout@v6 | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v4 | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@v4 | |
| - name: Login to Docker Hub | |
| uses: docker/login-action@v4 | |
| with: | |
| username: ${{ secrets.DOCKER_USERNAME }} | |
| password: ${{ secrets.DOCKER_TOKEN }} | |
| - name: Log in to Github registry | |
| uses: docker/login-action@v4 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: set lower case github repository | |
| run: | | |
| echo "GITHUB_REPOSITORY=${REPO,,}" >>${GITHUB_ENV} | |
| env: | |
| REPO: '${{ github.repository }}' | |
| - name: Build and push image | |
| uses: docker/build-push-action@v7 | |
| with: | |
| context: . | |
| sbom: true | |
| push: true | |
| tags: | | |
| ${{ env.DOCKER_NAMESPACE }}/${{ env.DOTCLEAR_IMAGE }}:dev | |
| ghcr.io/${{ env.GITHUB_REPOSITORY }}:dev | |
| build-args: CANAL=${{ env.DOTCLEAR_CANAL }} | |
| platforms: linux/386,linux/amd64,linux/arm/v7,linux/arm64/v8,linux/ppc64le,linux/s390x | |
| no-cache: true | |
| - name: Docker Scout | |
| id: docker-scout | |
| uses: docker/scout-action@v1.20.3 | |
| with: | |
| command: environment,quickview,cves,recommendations | |
| image: ${{ env.DOCKER_NAMESPACE }}/${{ env.DOTCLEAR_IMAGE }}:dev | |
| environment: unstable | |
| organization: ${{ env.DOCKER_NAMESPACE }} | |
| write-comment: true | |
| github-token: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Send Telegram Message Ok | |
| uses: appleboy/telegram-action@master | |
| env: | |
| GITHUB_CONTEXT: ${{toJSON(github)}} | |
| with: | |
| to: ${{ secrets.TELEGRAM_ID }} | |
| token: ${{ secrets.TELEGRAM_TOKEN }} | |
| format: markdown | |
| message: Image __${{ env.DOTCLEAR_IMAGE }}:dev__ successfully generated. |