publish-release.yml

name: Publish Release
run-name: '@${{ github.triggering_actor }}: ${{ github.ref_name }}: ${{ github.event_name }}: ${{ github.event.action }}'
on:
  release:
    types: [published]

env:
  REGISTRY: ghcr.io
  IMAGE_NAME: firetail-code-repository-scanner

jobs:
  publish-release:
    name: Publish Release
    environment: prod
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    steps:

      - name: Set Image Tags
        run: |
          NAMESPACE="$(awk '{print(tolower($0))}' <<<${{ github.repository_owner }})"
          echo "TAG_BASE=${{ env.REGISTRY }}/${NAMESPACE}/${{ env.IMAGE_NAME }}" >>${GITHUB_ENV}

      - name: Log In to the Container Registry
        run: |
           docker login ${{ env.REGISTRY }} \
            --username ${{ github.actor }} \
            --password-stdin <<<${{ secrets.GITHUB_TOKEN }}

      - name: Publish Prelease Lambda Image as Full Release
        run: |
          docker pull ${{ env.TAG_BASE }}:${{ github.ref_name }}-prerelease
          docker tag ${{ env.TAG_BASE }}:${{ github.ref_name }}-prerelease \
            ${{ env.TAG_BASE }}:${{ github.ref_name }}
          docker tag ${{ env.TAG_BASE }}:${{ github.ref_name }}-prerelease \
            ${{ env.TAG_BASE }}:latest
          docker push ${{ env.TAG_BASE }}:${{ github.ref_name }}
          docker push ${{ env.TAG_BASE }}:latest

      - name: Summarize Workflow Run
        run: |
          cat <<HEREDOC >>${GITHUB_STEP_SUMMARY}
          ## Successfully Pushed:

          - ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.ref_name }}
          - ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest
          - ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.ref_name }}-lambda
          - ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:latest-lambda
          HEREDOC