ci: publishing Docker image (#225)

Author: DeveloperC286

.github/workflows/continuous-delivery.yml

@@ -7,6 +7,7 @@ on:
 # https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
 permissions:
   contents: write
+  packages: write
 
 jobs:
   publish-binary:
@@ -19,6 +20,7 @@ jobs:
         run: make publish-binary RELEASE="${GITHUB_REF_NAME}"
         env:
           GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by GitHub Actions.
+
   publish-crate:
     name: Publish Crate
     runs-on: ubuntu-latest
@@ -29,3 +31,20 @@ jobs:
         run: make publish-crate
         env:
           CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
+
+  publish-docker:
+    name: Publish Docker Image
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code.
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Publish Docker Image
+        run: make publish-docker RELEASE="${GITHUB_REF_NAME}"

.github/workflows/continuous-integration.yml

@@ -44,14 +44,6 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Unit test.
         run: make unit-test
-  static-binary-test:
-    name: Static Binary Test
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout code.
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Static binary test.
-        run: make static-binary-test
   end-to-end-test:
     name: End to End Test
     runs-on: ubuntu-latest

.github/workflows/dogfood.yml

@@ -0,0 +1,19 @@
+name: Dogfood
+
+on: pull_request
+
+permissions:
+  contents: read
+
+jobs:
+  docker:
+    name: Docker
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code.
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+          fetch-depth: 0
+      - name: Dogfooding Docker
+        run: make dogfood-docker FROM="origin/${{ github.base_ref }}"

Dockerfile

@@ -0,0 +1,10 @@
+FROM alpine:3.22.0@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
+
+RUN apk add --no-cache \
+    git=2.49.0-r0
+
+COPY ./target/x86_64-unknown-linux-musl/release/conventional_commits_next_version /usr/local/bin/
+
+WORKDIR /workspace
+
+ENTRYPOINT ["conventional_commits_next_version"]

Makefile

@@ -2,7 +2,7 @@
 UID := $(shell id -u)
 GID := $(shell id -g)
 
-.PHONY: check-clean-git-history check-conventional-commits-linting check-rust-formatting check-python-formatting check-yaml-formatting fix-rust-formatting fix-python-formatting fix-yaml-formatting check-rust-linting check-github-actions-workflows-linting compile unit-test static-binary-test end-to-end-test publish-binary publish-crate
+.PHONY: check-clean-git-history check-conventional-commits-linting check-rust-formatting check-python-formatting check-yaml-formatting fix-rust-formatting fix-python-formatting fix-yaml-formatting check-rust-linting check-github-actions-workflows-linting compile unit-test end-to-end-test publish-binary publish-crate dogfood-docker publish-docker
 
 # renovate: depName=ghcr.io/developerc286/clean_git_history
 CLEAN_GIT_HISTORY_VERSION=1.0.4@sha256:5783341a3377a723e409e72b9ec0826a75ba944288d030978355de05ef65b186
@@ -27,7 +27,7 @@ SHFMT_VERSION=v3.11.0-alpine@sha256:394d755b6007056a2e6d7537ccdbdcfca01b9855ba91
 
 check-shell-formatting:
 	docker pull mvdan/shfmt:$(SHFMT_VERSION)
-	docker run --rm -v $(PWD):/workspace -w /workspace -u $(UID):$(GID) mvdan/shfmt:$(SHFMT_VERSION) --simplify --diff ci/* 
+	docker run --rm -v $(PWD):/workspace -w /workspace -u $(UID):$(GID) mvdan/shfmt:$(SHFMT_VERSION) --simplify --diff ci/*
 
 check-python-formatting:
 	docker build -t check-python-formatting -f ci/check-python-formatting.Dockerfile .
@@ -43,7 +43,7 @@ fix-rust-formatting:
 
 fix-shell-formatting:
 	docker pull mvdan/shfmt:$(SHFMT_VERSION)
-	docker run --rm -v $(PWD):/workspace -w /workspace -u $(UID):$(GID) mvdan/shfmt:$(SHFMT_VERSION) --simplify --write ci/* 
+	docker run --rm -v $(PWD):/workspace -w /workspace -u $(UID):$(GID) mvdan/shfmt:$(SHFMT_VERSION) --simplify --write ci/*
 
 fix-python-formatting:
 	docker build -t fix-python-formatting -f ci/fix-python-formatting.Dockerfile .
@@ -75,18 +75,25 @@ unit-test:
 	docker build -t unit-test -f ci/unit-test.Dockerfile .
 	docker run --rm -v $(PWD):/workspace -u $(UID):$(GID) unit-test
 
-static-binary-test: compile
-	docker run --rm -v $(PWD):/workspace -u $(UID):$(GID) compile --release
-	./target/x86_64-unknown-linux-musl/release/conventional_commits_next_version --help
-
 end-to-end-test: compile
 	docker build -t end-to-end-test -f ci/end-to-end-test.Dockerfile .
 	docker run --rm -v $(PWD):/workspace -u $(UID):$(GID) end-to-end-test
 
-publish-binary: static-binary-test
+release:
+	docker build -t compile -f ci/compile.Dockerfile .
+	docker run --rm -v $(PWD):/workspace -u $(UID):$(GID) compile --release
+
+publish-binary: release
 	docker build -t publish-binary -f ci/publish-binary.Dockerfile .
 	docker run --rm -v $(PWD):/workspace -u $(UID):$(GID) -e GH_TOKEN publish-binary $(RELEASE)
 
 publish-crate:
 	docker build -t publish-crate -f ci/publish-crate.Dockerfile .
 	docker run --rm -v $(PWD):/workspace -u $(UID):$(GID) -e CARGO_REGISTRY_TOKEN publish-crate
+
+dogfood-docker: release
+	docker build -t conventional-commits-linter -f Dockerfile .
+	docker run --rm -v $(PWD):/workspace -u $(UID):$(GID) conventional-commits-linter --from-version v1.0.0 $(FROM)
+
+publish-docker: release
+	./ci/publish-docker.sh ${RELEASE}

ci/publish-docker.sh

@@ -0,0 +1,21 @@
+#!/usr/bin/env sh
+
+set -o errexit
+set -o xtrace
+
+if [ $# -eq 0 ]; then
+	echo "Usage: $0 <release>"
+	exit 1
+fi
+
+RELEASE="$1"
+REPOSITORY="$(basename $(git rev-parse --show-toplevel))"
+IMAGE="ghcr.io/developerc286/${REPOSITORY}"
+
+docker build --tag "${IMAGE}:${RELEASE}" --file Dockerfile .
+docker push "${IMAGE}:${RELEASE}"
+
+if [ "${RELEASE#v}" != "${RELEASE}" ]; then
+	docker tag "${IMAGE}:${RELEASE}" "${IMAGE}:${RELEASE#v}"
+	docker push "${IMAGE}:${RELEASE#v}"
+fi