mirror of
https://github.com/donaldzou/WGDashboard.git
synced 2025-06-28 01:06:58 +00:00
96 lines
2.8 KiB
YAML
96 lines
2.8 KiB
YAML
name: Docker Build and Push
|
|
|
|
on:
|
|
push:
|
|
branches: [main]
|
|
workflow_dispatch:
|
|
inputs:
|
|
trigger-build:
|
|
description: 'Trigger a manual build and push'
|
|
required: true
|
|
default: 'true'
|
|
|
|
env:
|
|
DOCKER_HUB_PREFIX: docker.io
|
|
GHCR_PREFIX: ghcr.io
|
|
DOCKER_IMAGE: donaldzou/wgdashboard
|
|
|
|
jobs:
|
|
docker_build:
|
|
runs-on: ubuntu-latest
|
|
strategy:
|
|
fail-fast: false
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
|
|
- name: Log in to Docker Hub
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ${{ env.DOCKER_HUB_PREFIX }}
|
|
username: ${{ secrets.DOCKER_HUB_USERNAME }}
|
|
password: ${{ secrets.DOCKER_HUB_PASSWORD }}
|
|
|
|
- name: Log in to GitHub Container Registry
|
|
uses: docker/login-action@v3
|
|
with:
|
|
registry: ${{ env.GHCR_PREFIX }}
|
|
username: ${{ github.actor }}
|
|
password: ${{ secrets.GITHUB_TOKEN }}
|
|
|
|
- name: Set up QEMU
|
|
uses: docker/setup-qemu-action@v3
|
|
with:
|
|
platforms: linux/amd64,linux/arm64,linux/arm/v7
|
|
|
|
- name: Set up Docker Buildx
|
|
uses: docker/setup-buildx-action@v3
|
|
|
|
- name: Extract metadata (tags, labels)
|
|
id: meta
|
|
uses: docker/metadata-action@v5
|
|
with:
|
|
images: |
|
|
${{ env.DOCKER_HUB_PREFIX }}/${{ env.DOCKER_IMAGE }}
|
|
${{ env.GHCR_PREFIX }}/${{ env.DOCKER_IMAGE }}
|
|
tags: |
|
|
type=semver,pattern={{version}}
|
|
type=semver,pattern=latest,enable={{is_tag}}
|
|
type=raw,value=nightly,enable={{is_default_branch}}
|
|
type=ref,pattern={{ref_name}},enable={{is_default_branch}}
|
|
|
|
- name: Build and export (multi-arch)
|
|
uses: docker/build-push-action@v6
|
|
with:
|
|
context: .
|
|
file: ./docker/Dockerfile
|
|
push: true
|
|
tags: ${{ steps.meta.outputs.tags }}
|
|
labels: ${{ steps.meta.outputs.labels }}
|
|
platforms: linux/amd64,linux/arm64,linux/arm/v7
|
|
|
|
docker_scan:
|
|
runs-on: ubuntu-latest
|
|
needs: docker_build
|
|
steps:
|
|
- name: Docker Scout CVEs
|
|
uses: docker/scout-action@v1
|
|
with:
|
|
command: cves
|
|
image: ${{ env.GHCR_PREFIX }}/${{ env.DOCKER_IMAGE }}:nightly
|
|
only-severities: critical,high
|
|
only-fixed: true
|
|
write-comment: true
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|
|
exit-code: true
|
|
|
|
- name: Docker Scout Compare
|
|
uses: docker/scout-action@v1
|
|
with:
|
|
command: compare
|
|
image: ${{ env.GHCR_PREFIX }}/${{ env.DOCKER_IMAGE }}:nightly
|
|
to: ${{ env.GHCR_PREFIX }}/${{ env.DOCKER_IMAGE }}:latest
|
|
only-severities: critical,high
|
|
ignore-unchanged: true
|
|
github-token: ${{ secrets.GITHUB_TOKEN }}
|