Skip to content

Merge pull request #1 from numerique-gouv/add-ci #17

Merge pull request #1 from numerique-gouv/add-ci

Merge pull request #1 from numerique-gouv/add-ci #17

Workflow file for this run

name: Docker Hub Workflow
on:
workflow_dispatch:
push:
branches:
- 'main'
tags:
- 'v*'
pull_request:
branches:
- 'main'
env:
DOCKER_USER: 1001:127
jobs:
build-and-push-backend:
runs-on: ubuntu-latest
strategy:
fail-fast: false
matrix:
include:
- dockerfile: dockerfiles/goofys/Dockerfile
image: lasuite/goofys
path: dockerfiles/goofys
cmd_version: "echo \"VERSION=$( awk '/VERSION/ {print substr($3, 2)}' dockerfiles/goofys/Dockerfile)\" >> $GITHUB_ENV"
steps:
-
name: Checkout
uses: actions/checkout@v4
-
name: Read version
run: ${{ matrix.cmd_version }}
-
name: Docker meta
id: meta
uses: docker/metadata-action@v5
with:
images: ${{ matrix.image }}
tags: |
type=pep440,pattern={{version}},value=${{ env.VERSION }}
-
name: Load sops secrets
uses: rouja/actions-sops@main
with:
secret-file: .github/workflows/secrets.enc.env
age-key: ${{ secrets.SOPS_PRIVATE }}
-
name: Login to DockerHub
if: github.event_name != 'pull_request'
run: echo "$DOCKER_HUB_PASSWORD" | docker login -u "$DOCKER_HUB_USER" --password-stdin
-
name: Build and push
uses: docker/build-push-action@v5
with:
context: ${{ matrix.path }}
file: ${{ matrix.dockerfile }}
push: ${{ github.event_name != 'pull_request' }}
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}