name: Docker Automated Builds

on:

push:

branches:

- main

tags:

- "v*.*.*"

pull_request:

branches:

- main

schedule:

- cron: "0 0 * * 0"

jobs:

docker:

name: Docker Build and Push

runs-on: ubuntu-latest

steps:

- name: Checkout

uses: actions/checkout@v3

- name: Docker meta

id: meta

uses: docker/metadata-action@v5

with:

images: |

orhunp/linuxwave

ghcr.io/${{ github.repository_owner }}/linuxwave

tags: |

type=schedule

type=ref,event=branch

type=ref,event=pr

type=sha

type=raw,value=latest

type=semver,pattern={{version}}

- name: Set up QEMU

uses: docker/setup-qemu-action@v3

with:

platforms: arm64

- name: Set up Docker Buildx

id: buildx

uses: docker/setup-buildx-action@v3

- name: Cache Docker layers

uses: actions/cache@v3

with:

path: /tmp/.buildx-cache

key: ${{ runner.os }}-buildx-${{ github.sha }}

restore-keys: |

${{ runner.os }}-buildx-

- name: Login to Docker Hub

if: github.event_name != 'pull_request'

uses: docker/login-action@v3

with:

username: orhunp

password: ${{ secrets.DOCKER_HUB_ACCESS_TOKEN }}

- name: Login to GHCR

if: github.event_name != 'pull_request'

uses: docker/login-action@v3

with:

registry: ghcr.io

username: ${{ github.repository_owner }}

password: ${{ secrets.GITHUB_TOKEN }}

- name: Build and push

id: docker_build

uses: docker/build-push-action@v6

with:

context: ./

file: ./Dockerfile

platforms: linux/amd64,linux/arm64

builder: ${{ steps.buildx.outputs.name }}

push: ${{ github.event_name != 'pull_request' }}

tags: ${{ steps.meta.outputs.tags }}

sbom: true

provenance: true

labels: ${{ steps.meta.outputs.labels }}

cache-from: type=local,src=/tmp/.buildx-cache

cache-to: type=local,dest=/tmp/.buildx-cache

- name: Scan the image

uses: anchore/sbom-action@v0

with:

image: ghcr.io/${{ github.repository_owner }}/linuxwave

- name: Image digest

run: echo ${{ steps.docker_build.outputs.digest }}