summaryrefslogtreecommitdiff
path: root/.github/workflows/docker-publish.yml
diff options
context:
space:
mode:
authorseth <[email protected]>2024-01-07 20:42:07 -0500
committerseth <[email protected]>2024-01-07 21:08:57 -0500
commit90ad9d652f009a53b57115c924446baf6f1d3b7b (patch)
tree6df1841fc082fefd37846391a0d9964cb482b401 /.github/workflows/docker-publish.yml
parent4578d68f3106f95607e9d3e713936ba2a565322b (diff)
feat: use nix to build images
this should result in smaller images, as well as safer updates
Diffstat (limited to '.github/workflows/docker-publish.yml')
-rw-r--r--.github/workflows/docker-publish.yml63
1 files changed, 0 insertions, 63 deletions
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml
deleted file mode 100644
index 1e19120..0000000
--- a/.github/workflows/docker-publish.yml
+++ /dev/null
@@ -1,63 +0,0 @@
-name: Publish Docker Image
-
-on:
- push:
- tags:
- - '*'
- pull_request:
- branches:
- - 'main'
-
-env:
- IMAGE_NAME: ${{ github.repository }}
-
-
-jobs:
- build:
-
- runs-on: ubuntu-latest
- permissions:
- contents: read
- packages: write
- id-token: write
-
- steps:
- - name: Checkout repository
- uses: actions/checkout@v3
-
- - name: Install cosign
- if: github.event_name != 'pull_request'
- uses: sigstore/cosign-installer@main
-
- - name: Setup Docker buildx
- uses: docker/setup-buildx-action@v2
-
- - name: Log into docker hub
- if: github.event_name != 'pull_request'
- uses: docker/login-action@v2
- with:
- username: ${{ secrets.DOCKER_USERNAME }}
- password: ${{ secrets.DOCKER_TOKEN }}
-
- - name: Extract Docker metadata
- id: meta
- uses: docker/metadata-action@v4
- with:
- images: ${{ env.IMAGE_NAME }}
-
- - name: Build and push Docker image
- id: build-and-push
- uses: docker/build-push-action@v3
- with:
- context: .
- push: ${{ github.event_name != 'pull_request' }}
- tags: ${{ steps.meta.outputs.tags }}
- labels: ${{ steps.meta.outputs.labels }}
- cache-from: type=gha
- cache-to: type=gha,mode=max
-
- - name: Sign the published Docker image
- if: ${{ github.event_name != 'pull_request' }}
- env:
- COSIGN_EXPERIMENTAL: "true"
- run: echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign {}@${{ steps.build-and-push.outputs.digest }}