diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index e24eea4..0905d4b 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -1,93 +1,13 @@ -name: Vib Build +name: Go on: push: branches: - 'main' - tags: - - '*' workflow_dispatch: pull_request: -env: - BUILDX_NO_DEFAULT_ATTESTATIONS: 1 - jobs: - image: - runs-on: ubuntu-latest - permissions: - contents: write # Allow actions to write contents - packages: write # Allow pushing images to GHCR - attestations: write # To create and write attestations - id-token: write # Additional permissions for persistence of the attestations - - steps: - - uses: actions/checkout@v4 - - - name: Set variables - id: vars - run: echo "sha_short=$(git rev-parse --short HEAD) >> $GITHUB_OUTPUT" - - - uses: vanilla-os/vib-gh-action@v0.7.0 - - - uses: actions/upload-artifact@v4 - with: - name: Containerfile - path: Containerfile - - - name: Generate image name - run: | - REPO_OWNER_LOWERCASE="$(echo ${{ github.repository_owner }} | tr '[:upper:]' '[:lower:]')" - echo "REPO_OWNER_LOWERCASE=$REPO_OWNER_LOWERCASE" >> "$GITHUB_ENV" - echo "IMAGE_NAME=ghcr.io/$REPO_OWNER_LOWERCASE/chronos" >> "$GITHUB_ENV" - - - name: Docker meta - id: docker_meta - uses: docker/metadata-action@v5 - with: - images: | - ${{ env. IMAGE_NAME }} - tags: | - type=semver,pattern={{version}} - type=semver,pattern={{major}}.{{minor}} - type=semver,pattern={{raw}} - type=semver,pattern=v{{major}} - type=ref,event=branch - - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 - - - name: Login to GitHub Package Registry - uses: docker/login-action@v3 - if: ${{ github.event_name == 'push' }} - with: - registry: ghcr.io - username: ${{ github.repository_owner }} - password: ${{ secrets.GITHUB_TOKEN }} - - - name: Build and Push the Docker image - id: push - uses: docker/build-push-action@v5 - with: - context: . - file: Containerfile - push: ${{ github.event_name != 'pull_request' }} - tags: ${{ steps.docker_meta.outputs.tags }} - labels: ${{ steps.docker_meta.outputs.labels }} - cache-from: type=gha - cache-to: type=gha,mode=max - platforms: linux/amd64 - provenance: false - - - name: Attest pushed image - uses: actions/attest-build-provenance@v1 - id: attest - if: ${{ github.event_name != 'pull_request' }} - with: - subject-name: ${{ env.IMAGE_NAME }} - subject-digest: ${{ steps.push.outputs.digest }} - push-to-registry: false - build: runs-on: ubuntu-latest container: diff --git a/.github/workflows/image.yml b/.github/workflows/image.yml new file mode 100644 index 0000000..b179196 --- /dev/null +++ b/.github/workflows/image.yml @@ -0,0 +1,88 @@ +name: Vib Build + +on: + push: + branches: + - 'main' + tags: + - '*' + workflow_dispatch: + +env: + BUILDX_NO_DEFAULT_ATTESTATIONS: 1 + +jobs: + image: + runs-on: ubuntu-latest + permissions: + contents: write # Allow actions to write contents + packages: write # Allow pushing images to GHCR + attestations: write # To create and write attestations + id-token: write # Additional permissions for persistence of the attestations + + steps: + - uses: actions/checkout@v4 + + - name: Set variables + id: vars + run: echo "sha_short=$(git rev-parse --short HEAD) >> $GITHUB_OUTPUT" + + - uses: vanilla-os/vib-gh-action@v0.7.0 + + - uses: actions/upload-artifact@v4 + with: + name: Containerfile + path: Containerfile + + - name: Generate image name + run: | + REPO_OWNER_LOWERCASE="$(echo ${{ github.repository_owner }} | tr '[:upper:]' '[:lower:]')" + echo "REPO_OWNER_LOWERCASE=$REPO_OWNER_LOWERCASE" >> "$GITHUB_ENV" + echo "IMAGE_NAME=ghcr.io/$REPO_OWNER_LOWERCASE/chronos" >> "$GITHUB_ENV" + + - name: Docker meta + id: docker_meta + uses: docker/metadata-action@v5 + with: + images: | + ${{ env. IMAGE_NAME }} + tags: | + type=semver,pattern={{version}} + type=semver,pattern={{major}}.{{minor}} + type=semver,pattern={{raw}} + type=semver,pattern=v{{major}} + type=ref,event=branch + + - name: Set up Docker Buildx + uses: docker/setup-buildx-action@v3 + + - name: Login to GitHub Package Registry + uses: docker/login-action@v3 + if: ${{ github.event_name == 'push' }} + with: + registry: ghcr.io + username: ${{ github.repository_owner }} + password: ${{ secrets.GITHUB_TOKEN }} + + - name: Build and Push the Docker image + id: push + uses: docker/build-push-action@v5 + with: + context: . + file: Containerfile + push: ${{ github.event_name != 'pull_request' }} + tags: ${{ steps.docker_meta.outputs.tags }} + labels: ${{ steps.docker_meta.outputs.labels }} + cache-from: type=gha + cache-to: type=gha,mode=max + platforms: linux/amd64 + provenance: false + + - name: Attest pushed image + uses: actions/attest-build-provenance@v1 + id: attest + if: ${{ github.event_name != 'pull_request' }} + with: + subject-name: ${{ env.IMAGE_NAME }} + subject-digest: ${{ steps.push.outputs.digest }} + push-to-registry: false