From 0deba0c062c3c4caa320802815347ced2e9675b8 Mon Sep 17 00:00:00 2001 From: Dmitry Smirnov Date: Thu, 5 Dec 2024 16:57:56 +0200 Subject: [PATCH] test release --- .github/workflows/release.yml | 41 +++++++++-------------------------- 1 file changed, 10 insertions(+), 31 deletions(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7769bbaf..6430d40d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -38,35 +38,24 @@ jobs: useConfigFile: true configFilePath: ci/git-version.yml - - name: Build Multi-Arch Docker Image - id: build-image + - name: Log in to Docker Hub + uses: docker/login-action@v3 + with: + username: "usabilitydynamics" + password: ${{ secrets.DOCKER_TOKEN }} + + - name: Push Signed Docker Images uses: docker/build-push-action@v6 with: context: . - file: ./Dockerfile platforms: linux/amd64 - push: false # Do not push yet - load: true # Ensure the built image is loaded into the local Docker environment + push: true tags: | usabilitydynamics/udx-worker:${{ steps.gitversion.outputs.semVer }} usabilitydynamics/udx-worker:latest - - name: Log in to Docker Hub - uses: docker/login-action@v3 - with: - username: "usabilitydynamics" - password: ${{ secrets.DOCKER_TOKEN }} - - name: Install Cosign - uses: sigstore/cosign-installer@v3.7.0 - - - name: Extract Image Digest - id: extract-digest - run: | - # Extract the digest of the built image - IMAGE_DIGEST=$(docker inspect usabilitydynamics/udx-worker:${{ steps.gitversion.outputs.semVer }} | grep -o 'sha256:[a-f0-9]\{64\}' | head -n 1) - echo "IMAGE_DIGEST=$IMAGE_DIGEST" >> $GITHUB_ENV - shell: bash + uses: sigstore/cosign-installer@v3.7.0 - name: Sign Docker Image with Cosign env: @@ -76,17 +65,7 @@ jobs: # Correctly format the reference with @sha256 for Cosign cosign sign -y \ --key env://COSIGN_PRIVATE_KEY \ - usabilitydynamics/udx-worker@${IMAGE_DIGEST} - - - name: Push Signed Docker Images - uses: docker/build-push-action@v6 - with: - context: . - platforms: linux/amd64 - push: true - tags: | - usabilitydynamics/udx-worker:${{ steps.gitversion.outputs.semVer }} - usabilitydynamics/udx-worker:latest + usabilitydynamics/udx-worker - name: Install Trivy run: |