From 6ac00403b1771c7d95488a89a981138cb54ac9ac Mon Sep 17 00:00:00 2001 From: Christoph Stahl Date: Sun, 22 Jun 2025 22:41:46 +0200 Subject: [PATCH] Build docker image for appimage building --- .../workflows/docker-appimage-builder.yaml | 59 +++++++++++++++++++ 1 file changed, 59 insertions(+) create mode 100644 .github/workflows/docker-appimage-builder.yaml diff --git a/.github/workflows/docker-appimage-builder.yaml b/.github/workflows/docker-appimage-builder.yaml new file mode 100644 index 0000000..d85cf7a --- /dev/null +++ b/.github/workflows/docker-appimage-builder.yaml @@ -0,0 +1,59 @@ +name: Build docker container for appimage building + +# Controls when the workflow will run +on: + # Allows you to run this workflow manually from the Actions tab + workflow_dispatch: + +env: + REGISTRY: ghcr.io + IMAGE_NAME: ${{ github.repository }}-appimage-builder + +# A workflow run is made up of one or more jobs that can run sequentially or in parallel +jobs: + docker: + runs-on: ubuntu-latest + + permissions: + contents: read + packages: write + attestations: write + id-token: write + + steps: + - name: Check out repository + uses: actions/checkout@v4 + with: + repository: christofsteel/syng + - name: Log in to the Container registry + uses: docker/login-action@v3 + with: + registry: ${{ env.REGISTRY }} + username: ${{ github.actor }} + password: ${{ secrets.GITHUB_TOKEN }} + - name: Extract metadata (tags, labels) for Docker + id: meta + uses: docker/metadata-action@v5 + with: + images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }} + tags: | + type=ref,event=branch + type=ref,event=pr + type=semver,pattern={{version}} + type=semver,pattern={{major}}.{{minor}} + type=semver,pattern={{major}} + - name: Build and push Docker image + id: push + uses: docker/build-push-action@v6 + with: + context: . + file: ./resources/appimage/Dockerfile + push: true + tags: ${{ steps.meta.outputs.tags }} + labels: ${{ steps.meta.outputs.labels }} + - name: Generate artifact attestation + uses: actions/attest-build-provenance@v1 + with: + subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}} + subject-digest: ${{ steps.push.outputs.digest }} + push-to-registry: true