release.yml

name: Weekly Release

# Build a fresh image every week.
on:
  schedule:
    - cron: 0 14 * * 1 # run at 9am eastern US time every Monday
  push:
    branches:
      - main
  workflow_dispatch: # allow manual triggering

jobs:
  build_and_upload_image:
    runs-on: ubuntu-latest
    steps:
      - name: Set up Docker buildx
        uses: docker/setup-buildx-action@v3
      - name: Add Metadata
        id: add_metadata
        uses: docker/metadata-action@v5
        with:
          images: ghcr.io/${{ github.repository }}
      - name: Log in to GHCR
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ github.token }}
      - name: Build and Push
        uses: docker/build-push-action@v6
        with:
          platforms: linux/amd64 # GitHub only offers AMD64 codespaces
          pull: true
          push: true
          tags: ghcr.io/${{ github.repository }}:latest
          annotations: ${{ steps.add_metadata.outputs.annotations }}
          labels: ${{ steps.add_metadata.outputs.labels }}
          provenance: mode=max
          sbom: true
          cache-from: type=gha
          # mode=max means "cache everything possible". This ensures maximum
          # use of the cache, but will use up GitHub's 10 GB cache size limit
          # faster.
          cache-to: type=gha,mode=max