ci.yml

name: CI
on:
  push:
    tags:
      - 'v*'
jobs:
  ci:
    runs-on: ubuntu-latest
    permissions:
      packages: write
      id-token: write
    steps:
      - name: Login to GitHub
        uses: docker/login-action@v1.9.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Retrieve tag name
        if: ${{ startsWith(github.ref, 'refs/tags/') }}
        run: |
          echo TAG_NAME=$(echo $GITHUB_REF | sed -e "s|refs/tags/||") >> $GITHUB_ENV
      - name: build + push
        uses: docker/build-push-action@v2.7.0
        with:
          push: true
          build-args: VERSION=${{ env.TAG_NAME }}
          tags: ghcr.io/raulcabello/app-example:${{ env.TAG_NAME }}
      - uses: sigstore/cosign-installer@main
        with:
          cosign-release: 'v1.8.0'
      - name: Sign + push signature
        run: |
          cosign version
          cosign sign ghcr.io/raulcabello/app-example:${{ env.TAG_NAME }}
        env:
          COSIGN_EXPERIMENTAL: 1