Publish Copybara Docker Image #3
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Publish Copybara Docker Image | |
| on: | |
| workflow_dispatch: | |
| schedule: | |
| - cron: "0 0 * * 0" # Weekly | |
| jobs: | |
| publish-copybara: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write | |
| id-token: write | |
| name: Publish to Docker Hub | |
| steps: | |
| - name: Checkout Copybara source repository | |
| uses: actions/checkout@v2 | |
| with: | |
| repository: google/copybara | |
| path: copybara | |
| fetch-depth: 1 | |
| - name: Get Copybara latest commit's SHA | |
| run: echo "COPYBARA_SHA=$(git -C copybara rev-parse --short HEAD)" >> $GITHUB_ENV | |
| - name: Extract metadata from GitHub Action context | |
| id: meta | |
| uses: docker/metadata-action@v3 | |
| with: | |
| images: | | |
| shreyasbhat0/copybara | |
| ghcr.io/shreyasbhat0/copybara | |
| tags: | | |
| type=raw,${{ env.COPYBARA_SHA }} | |
| type=schedule,pattern={{date 'YYYYMMDD'}} | |
| flavor: | | |
| latest=true | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@v1 | |
| - name: Set up Docker Buildx | |
| id: buildx | |
| uses: docker/setup-buildx-action@v1 | |
| - name: Login to DockerHub | |
| uses: docker/login-action@v1 | |
| with: | |
| username: shreyasbhat0 | |
| password: ${{ secrets.COPYBARA_DOCKER_HUB_TOKEN }} | |
| - name: Login to GitHub Container Registry | |
| uses: docker/login-action@v1 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.actor }} | |
| password: ${{ github.token }} | |
| - name: Use working Dockerfile | |
| run: curl -s https://raw.githubusercontent.com/google/copybara/master/Dockerfile > Dockerfile | |
| - name: Build and push | |
| uses: docker/build-push-action@v2 | |
| with: | |
| context: . | |
| platforms: linux/amd64,linux/arm64 | |
| push: true | |
| tags: ${{ steps.meta.outputs.tags }} | |
| labels: ${{ steps.meta.outputs.labels }} | |
| # Experimental | |
| - name: Install Cosign | |
| uses: sigstore/cosign-installer@main | |
| - name: Sign the image with GitHub OIDC **EXPERIMENTAL** | |
| run: cosign sign --oidc-issuer https://token.actions.githubusercontent.com ${TAGS} | |
| env: | |
| COSIGN_EXPERIMENTAL: 1 | |
| TAGS: ${{ steps.meta.outputs.tags }} |