docker #264

	name: docker

	on:
	push:
	branches: [main]

	schedule:
	# https://crontab.guru/#0_0___*
	- cron: "0 0 * * *"

	jobs:
	build:
	runs-on: ubuntu-24.04
	permissions:
	id-token: write
	packages: write
	contents: read
	attestations: write
	env:
	REGISTRY: ghcr.io
	IMAGE_NAME: ${{ github.repository }}

	steps:
	- name: Checkout
	uses: actions/checkout@v4
	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3
	- name: Login to GitHub Container Registry
	uses: docker/login-action@v3
	with:
	registry: ${{ env.REGISTRY }}
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}
	- run: echo "TIMESTAMP=$(git log -1 --pretty=%ct)" >> $GITHUB_ENV
	- name: Build and push image
	uses: docker/[email protected]
	id: push
	env:
	SOURCE_DATE_EPOCH: ${{ env.TIMESTAMP }}
	with:
	context: .
	push: true
	sbom: true
	platforms: "linux/amd64"
	tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:main,${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
	- name: Attest
	uses: actions/attest-build-provenance@v1
	id: attest
	with:
	subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
	subject-digest: ${{ steps.push.outputs.digest }}
	push-to-registry: true

Provide feedback