ghcr

Author: tommyzli

.github/workflows/ci.yml

@@ -73,39 +73,40 @@ jobs:
     name: Publish master branch artifacts
     runs-on: ubuntu-latest
     needs: [test_go, build_all, verify-example-configs]
-    if: |
-      (github.repository == 'prometheus-community/yet-another-cloudwatch-exporter')
-      &&
-      (github.event_name == 'push' && github.event.ref == 'refs/heads/master')
+    if: (github.event_name == 'push' && github.event.ref == 'refs/heads/master')
+    permissions:
+      packages: write
+      attestations: write
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: prometheus/promci@443c7fc2397e946bc9f5029e313a9c3441b9b86d # v0.4.7
-      - uses: ./.github/promci/actions/publish_main
+      - uses: ./.github/promci/actions/restore_artifacts
+      - uses: ./.github/promci/actions/publish_images
         with:
-          docker_hub_organization: prometheuscommunity
-          docker_hub_login: ${{ secrets.docker_hub_login }}
-          docker_hub_password: ${{ secrets.docker_hub_password }}
-          quay_io_organization: prometheuscommunity
-          quay_io_login: ${{ secrets.quay_io_login }}
-          quay_io_password: ${{ secrets.quay_io_password }}
+          registry: ghcr.io
+          organization: clickhouse
+          login: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
 
   publish_release:
     name: Publish release artifacts
     runs-on: ubuntu-latest
     needs: [test_go, build_all, verify-example-configs]
-    if: |
-      (github.repository == 'prometheus-community/yet-another-cloudwatch-exporter')
-      &&
-      (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v0.'))
+    if: (github.event_name == 'push' && startsWith(github.ref, 'refs/tags/v0.'))
+    permissions:
+      packages: write
+      attestations: write
+      contents: read
+      id-token: write
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - uses: prometheus/promci@443c7fc2397e946bc9f5029e313a9c3441b9b86d # v0.4.7
-      - uses: ./.github/promci/actions/publish_release
+      - uses: ./.github/promci/actions/restore_artifacts
+      - uses: ./.github/promci/actions/publish_release_images
         with:
-          docker_hub_organization: prometheuscommunity
-          docker_hub_login: ${{ secrets.docker_hub_login }}
-          docker_hub_password: ${{ secrets.docker_hub_password }}
-          quay_io_organization: prometheuscommunity
-          quay_io_login: ${{ secrets.quay_io_login }}
-          quay_io_password: ${{ secrets.quay_io_password }}
-          github_token: ${{ secrets.PROMBOT_GITHUB_TOKEN }}
+          registry: ghcr.io
+          organization: clickhouse
+          login: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}