.github/workflows/merge.yml - main - githubmirror/compose

.github/workflows/merge.yml
79 строк2 KB
Guillaume Lours
ci: publish images to Docker Hub using OIDC
03 авг 2026, 12:08
03 авг 2026, 12:08ea82c55
name: merge

permissions:
  contents: read # to fetch code (actions/checkout)

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

on:
  push:
    branches:
      - 'main'
    tags:
      - 'v*'

env:
  REPO_SLUG: "docker/compose-bin"

jobs:
  bin-image-prepare:
    runs-on: ubuntu-24.04
    outputs:
      repo-slug: ${{ env.REPO_SLUG }}
    steps:
      # FIXME: can't use env object in reusable workflow inputs: https://github.com/orgs/community/discussions/26671
      - run: echo "Exposing env vars for reusable workflow"

  bin-image:
    uses: docker/github-builder/.github/workflows/bake.yml@27ade872c1e2296e62ef15ab3b10d37665e57cf7 # v1.15.0
    needs:
      - bin-image-prepare
    permissions:
      contents: read # same as global permission
      id-token: write # for signing attestation(s) with GitHub OIDC Token
    with:
      runner: amd64
      target: image-cross
      cache: true
      cache-scope: bin-image
      output: image
      push: true # this workflow only triggers on push (main and tags)
      sbom: true
      set-meta-labels: true
      meta-images: |
        ${{ needs.bin-image-prepare.outputs.repo-slug }}
      meta-tags: |
        type=ref,event=tag
        type=edge
      meta-bake-target: meta-helper
      registry-identities: |
        - type: dockerhub
          username: docker
          connection_id: a295c8b7-54ab-4507-ac88-5c43003c73a5

  module-image:
    uses: docker/github-builder/.github/workflows/bake.yml@27ade872c1e2296e62ef15ab3b10d37665e57cf7 # v1.15.0
    permissions:
      contents: read # same as global permission
      id-token: write # for signing attestation(s) with GitHub OIDC Token
    with:
      runner: amd64
      target: image-module-cross
      cache: true
      cache-scope: module-image
      output: image
      push: ${{ startsWith(github.ref, 'refs/tags/v') }}
      sbom: true
      set-meta-labels: true
      meta-images: |
        docker/compose-desktop-module
      meta-tags: |
        type=ref,event=branch
        type=ref,event=tag
      meta-bake-target: meta-helper
      registry-identities: |
        - type: dockerhub
          username: docker
          connection_id: a295c8b7-54ab-4507-ac88-5c43003c73a5