Skip to content

fixup! wip: build(ci): test publish-dev-images.yml workflow #1

fixup! wip: build(ci): test publish-dev-images.yml workflow

fixup! wip: build(ci): test publish-dev-images.yml workflow #1

name: "Publish Dev/CI Container Images"
on:
push:
branches:
- main
- ci-test
# paths:
# - testing/v8serialize-echo/**/*
schedule:
# weekly, Wednesday @ 04:51
- cron: 51 4 * * 3
workflow_dispatch:
env:
REGISTRY: ghcr.io
TAG_PREFIX: ghcr.io/${{ github.repository }}
jobs:
v8serialize-echo:
name: Build & Publish v8serialize/echoserver Container Images
runs-on: ubuntu-latest
permissions:
packages: write
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Set up QEMU
uses: docker/setup-qemu-action@v3
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@v3
- name: Log in to the Container registry
uses: docker/login-action@v3
with:
registry: ${{ env.REGISTRY }}
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Set Environment Variables
run: |
set -x
cd testing/v8serialize-echo
source .envrc
echo "ECHOSERVER_VERSION=${ECHOSERVER_VERSION:?}" >> "${GITHUB_ENV:?}"
- name: Build & Publish CI Container Images
id: bake
uses: docker/bake-action@v5
with:
workdir:
targets: ci
files: testing/v8serialize-echo
provenance: true
sbom: true
push: true
set: |
*.cache-from=type=gha
*.cache-to=type=gha,mode=max
- name: Sign the images with GitHub OIDC Token
env:
BAKE_META: ${{ steps.bake.outputs.metadata }}
run: |
readarray -t image_refs < <(
jq <<<"${BAKE_META:?}" '
.[]
| select(.["image.name"]? and .["containerimage.digest"]?)
| "\(.["image.name"])@\(.["containerimage.digest"])"
'
)
cosign sign --yes ${image_refs:?}