diff options
| author | seth <[email protected]> | 2024-01-07 20:42:07 -0500 |
|---|---|---|
| committer | seth <[email protected]> | 2024-01-07 21:08:57 -0500 |
| commit | 90ad9d652f009a53b57115c924446baf6f1d3b7b (patch) | |
| tree | 6df1841fc082fefd37846391a0d9964cb482b401 /.github/workflows/docker-publish.yml | |
| parent | 4578d68f3106f95607e9d3e713936ba2a565322b (diff) | |
feat: use nix to build images
this should result in smaller images, as well as safer updates
Diffstat (limited to '.github/workflows/docker-publish.yml')
| -rw-r--r-- | .github/workflows/docker-publish.yml | 63 |
1 files changed, 0 insertions, 63 deletions
diff --git a/.github/workflows/docker-publish.yml b/.github/workflows/docker-publish.yml deleted file mode 100644 index 1e19120..0000000 --- a/.github/workflows/docker-publish.yml +++ /dev/null @@ -1,63 +0,0 @@ -name: Publish Docker Image - -on: - push: - tags: - - '*' - pull_request: - branches: - - 'main' - -env: - IMAGE_NAME: ${{ github.repository }} - - -jobs: - build: - - runs-on: ubuntu-latest - permissions: - contents: read - packages: write - id-token: write - - steps: - - name: Checkout repository - uses: actions/checkout@v3 - - - name: Install cosign - if: github.event_name != 'pull_request' - uses: sigstore/cosign-installer@main - - - name: Setup Docker buildx - uses: docker/setup-buildx-action@v2 - - - name: Log into docker hub - if: github.event_name != 'pull_request' - uses: docker/login-action@v2 - with: - username: ${{ secrets.DOCKER_USERNAME }} - password: ${{ secrets.DOCKER_TOKEN }} - - - name: Extract Docker metadata - id: meta - uses: docker/metadata-action@v4 - with: - images: ${{ env.IMAGE_NAME }} - - - name: Build and push Docker image - id: build-and-push - uses: docker/build-push-action@v3 - with: - context: . - push: ${{ github.event_name != 'pull_request' }} - tags: ${{ steps.meta.outputs.tags }} - labels: ${{ steps.meta.outputs.labels }} - cache-from: type=gha - cache-to: type=gha,mode=max - - - name: Sign the published Docker image - if: ${{ github.event_name != 'pull_request' }} - env: - COSIGN_EXPERIMENTAL: "true" - run: echo "${{ steps.meta.outputs.tags }}" | xargs -I {} cosign sign {}@${{ steps.build-and-push.outputs.digest }} |
