diff --git a/.github/workflows/docker-build.yaml b/.github/workflows/docker-build.yaml index 6710bd5..758fc68 100644 --- a/.github/workflows/docker-build.yaml +++ b/.github/workflows/docker-build.yaml @@ -8,48 +8,58 @@ on: - "*" pull_request: +env: + GAR_REGISTRY: us-central1-docker.pkg.dev/follow-428106/follow + jobs: build: runs-on: ubuntu-latest - - permissions: - contents: read - packages: write - steps: - name: Checkout uses: actions/checkout@v4 - - name: Set up Docker Buildx uses: docker/setup-buildx-action@v3 - - name: Login to Registry + - name: Google auth + id: auth + uses: google-github-actions/auth@v2 + with: + token_format: access_token + workload_identity_provider: projects/987979088361/locations/global/workloadIdentityPools/github/providers/github-action + service_account: gh-action@naturalselectionlabs.iam.gserviceaccount.com + create_credentials_file: true + + - name: Login to GAR uses: docker/login-action@v3 with: - registry: ghcr.io - username: ${{ github.actor }} - password: ${{ secrets.GITHUB_TOKEN }} + registry: us-central1-docker.pkg.dev + username: oauth2accesstoken + password: ${{ steps.auth.outputs.access_token }} - - name: Extract Docker metadata + - name: Extract metadata (tags, labels) for Docker id: meta uses: docker/metadata-action@v5 with: - images: ghcr.io/${{ github.repository }} + images: ${{ env.GAR_REGISTRY }}/unavatar tags: | type=raw,value=latest,enable={{is_default_branch}} + type=semver,pattern={{version}} + type=semver,pattern={{major}}.{{minor}} + type=semver,pattern={{major}} type=semver,pattern=v{{version}} type=semver,pattern=v{{major}}.{{minor}} type=semver,pattern=v{{major}} type=ref,event=branch type=ref,event=pr - type=sha,prefix={{branch}}-,enable=${{ !startsWith(github.ref, 'refs/tags') && github.event_name != 'pull_request' }},event=branch + type=sha + type=sha,format=long + type=sha,prefix={{branch}}-,enable=${{ !startsWith(github.ref, 'refs/tags') }},event=branch + type=sha,format=long,prefix={{branch}}-,enable=${{ !startsWith(github.ref, 'refs/tags') }},event=branch - name: Build and push - uses: docker/build-push-action@v5 + uses: docker/build-push-action@v4 with: context: . - file: ./Dockerfile - platforms: linux/amd64 push: true tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }}