publish-image-webhook.yaml

---
  # yaml-language-server: $schema=https://json.schemastore.org/github-workflow.json
  name: "Container: Image Build Webhook"
  on:
    workflow_dispatch: {}
    pull_request:
      branches: ["main"]
      types: ["opened", "synchronize", "reopened"]
      paths:
        - .github/workflows/publish-image-webhook.yaml
        - "build/webhook/**/*"
        - "cmd/webhook/**/*"
        - "pkg/**/*"
        - "internal/**/*"
        - "go.**"
        - ".dockerignore"
    push:
      tags:
        - 'k8s-pod-mutator-webhook-v*'
      branches:
        - main
      paths:
        - .github/workflows/publish-image-webhook.yaml
        - "build/webhook/**/*"
        - "cmd/webhook/**/*"
        - "pkg/**/*"
        - "internal/**/*"
        - "go.**"
        - ".dockerignore"

  jobs:
    publish-images:
      name: Publish Image
      permissions:
        contents: write
        packages: write
      runs-on: ubuntu-22.04

      steps:
        - name: Checkout repository
          uses: actions/checkout@v4
          with:
            fetch-depth: 0

        - name: Docker meta
          id: meta
          uses: docker/metadata-action@v5
          with:
            images: ghcr.io/${{ github.repository }}/webhook
            tags: |
              type=ref,event=pr
              type=schedule
              type=match,pattern=\d.\d.\d
              type=raw,value=latest,enable={{is_default_branch}}

        - name: Set up QEMU
          uses: docker/setup-qemu-action@v3.2.0

        - name: Set up Docker Buildx
          uses: docker/setup-buildx-action@v3.6.1

        - name: Log into registry ghcr.io
          uses: docker/login-action@v3.3.0
          with:
            registry: ghcr.io
            username: ${{ github.actor }}
            password: ${{ secrets.GITHUB_TOKEN }}

        - name: Build and push Docker image
          id: build-and-push
          uses: docker/build-push-action@v6.6.0
          with:
            push: ${{ github.event_name != 'pull_request' }}
            cache-from: type=gha
            cache-to: type=gha,mode=max
            context: ./
            file: ./build/webhook/Dockerfile
            labels: ${{ steps.meta.outputs.labels }}
            platforms: linux/amd64,linux/arm64
            tags: ${{ steps.meta.outputs.tags }}