From 3be134a56e14e5a15ecb9579fa71ad85ba02e07d Mon Sep 17 00:00:00 2001 From: Alexandros Tzimas Date: Tue, 2 Jul 2024 12:46:23 +0300 Subject: [PATCH] Create gh action to auto publish request processor image upon merge with main --- .../publish-request-processor-image.yml | 59 +++++++++++++++++++ 1 file changed, 59 insertions(+) create mode 100644 .github/workflows/publish-request-processor-image.yml diff --git a/.github/workflows/publish-request-processor-image.yml b/.github/workflows/publish-request-processor-image.yml new file mode 100644 index 0000000..e75b8cb --- /dev/null +++ b/.github/workflows/publish-request-processor-image.yml @@ -0,0 +1,59 @@ +# Publish the docker images of the project's services to Docker Hub +# +# This workflow uses actions that are not certified by GitHub. +# They are provided by a third-party and are governed by +# separate terms of service, privacy policy, and support +# documentation. + +# GitHub recommends pinning actions to a commit SHA. +# To get a newer version, you will need to update the SHA. +# You can also reference a tag or branch, but the action may change without warning. + +name: Publish Docker image + +on: + push: + branches: + - main + +jobs: + push_to_registry: + name: Push Docker image to Docker Hub + runs-on: ubuntu-latest + permissions: + packages: write + contents: read + attestations: write + id-token: write + steps: + - name: Check out the repo + uses: actions/checkout@v4 + + - name: Log in to Docker Hub + uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a + with: + username: ${{ secrets.DOCKER_USERNAME }} + password: ${{ secrets.DOCKER_PASSWORD }} + + - name: Extract metadata (tags, labels) for Docker + id: meta + uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7 + with: + images: tzalex/minting-server-request-processor:latest + + - name: Build and push Docker image + id: push + uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671 + with: + context: . + file: ./request_processor/Dockerfile + push: true + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }} + + - name: Generate artifact attestation + uses: actions/attest-build-provenance@v1 + with: + subject-name: tzalex/minting-server-request-processor + subject-digest: ${{ steps.push.outputs.digest }} + push-to-registry: true