fix: enable Docker image builds for pull requests

- Add dedicated docker-pr job for building PR-specific Docker images
- PR images tagged as PR-{number} for easy testing and identification
- Update notification job to handle both production and PR builds
- Enhance workflow summary to show appropriate Docker image links
- Maintain separation between production and PR builds for security

Author: JohanDevl

.github/workflows/ci-cd.yml

@@ -111,7 +111,7 @@ jobs:
           name: export-trakt-binary
           path: build/export_trakt
 
-  # Job 2: Build and Push Docker Images
+  # Job 2: Build and Push Docker Images (Production)
   docker:
     name: Build and Push Docker Images
     runs-on: ubuntu-latest
@@ -210,6 +210,79 @@ jobs:
         with:
           sarif_file: "trivy-results.sarif"
 
+  # Job 2b: Build and Push Docker Images for Pull Requests
+  docker-pr:
+    name: Build and Push Docker Images (PR)
+    runs-on: ubuntu-latest
+    needs: test-and-build
+    if: github.event_name == 'pull_request'
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Download build artifact
+        uses: actions/download-artifact@v4
+        with:
+          name: export-trakt-binary
+          path: build
+
+      - name: Make binary executable
+        run: chmod +x build/export_trakt
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Extract metadata for Docker (PR)
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: |
+            ${{ env.REGISTRY_IMAGE }}
+            ${{ env.GITHUB_IMAGE }}
+          tags: |
+            # PR tags - for pull request testing
+            type=ref,event=pr,prefix=PR-
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.GITHUB_REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set build date
+        id: build_date
+        run: echo "BUILD_DATE=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >> $GITHUB_OUTPUT
+
+      - name: Build and push Docker image (PR)
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          platforms: linux/amd64,linux/arm64,linux/arm/v7
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+          cache-from: type=gha,scope=${{ github.workflow }}-pr-${{ github.event.number }}
+          cache-to: type=gha,mode=max,scope=${{ github.workflow }}-pr-${{ github.event.number }}
+          build-args: |
+            VERSION=${{ needs.test-and-build.outputs.version }}
+            COMMIT_SHA=${{ github.sha }}
+            BUILD_DATE=${{ steps.build_date.outputs.BUILD_DATE }}
+
   # Job 3: Test Docker Image
   docker-test:
     name: Test Docker Image
@@ -250,15 +323,15 @@ jobs:
   # Job 4: Notification and Summary
   notify:
     name: Notify and Summarize
-    needs: [test-and-build, docker, docker-test]
+    needs: [test-and-build, docker, docker-pr, docker-test]
     runs-on: ubuntu-latest
     if: always()
 
     steps:
       - name: Check overall result
         id: check
         run: |
-          if ${{ needs.test-and-build.result == 'success' && (needs.docker.result == 'success' || needs.docker.result == 'skipped') && (needs.docker-test.result == 'success' || needs.docker-test.result == 'skipped') }}; then
+          if ${{ needs.test-and-build.result == 'success' && (needs.docker.result == 'success' || needs.docker.result == 'skipped') && (needs.docker-pr.result == 'success' || needs.docker-pr.result == 'skipped') && (needs.docker-test.result == 'success' || needs.docker-test.result == 'skipped') }}; then
             echo "status=success" >> $GITHUB_OUTPUT
             echo "✅ All jobs completed successfully"
           else
@@ -274,16 +347,21 @@ jobs:
           echo "- **Go Tests & Build**: ${{ needs.test-and-build.result }}" >> $GITHUB_STEP_SUMMARY
           echo "- **Coverage**: ${{ needs.test-and-build.outputs.coverage }}%" >> $GITHUB_STEP_SUMMARY
           echo "- **Version**: ${{ needs.test-and-build.outputs.version }}" >> $GITHUB_STEP_SUMMARY
-          if [ "${{ github.event_name }}" != "pull_request" ]; then
+          if [ "${{ github.event_name }}" == "pull_request" ]; then
+            echo "- **Docker Build (PR)**: ${{ needs.docker-pr.result }}" >> $GITHUB_STEP_SUMMARY
+          else
             echo "- **Docker Build**: ${{ needs.docker.result }}" >> $GITHUB_STEP_SUMMARY
             echo "- **Docker Test**: ${{ needs.docker-test.result }}" >> $GITHUB_STEP_SUMMARY
           fi
           echo "" >> $GITHUB_STEP_SUMMARY
           if [ "${{ steps.check.outputs.status }}" == "success" ]; then
             echo "### ✅ Pipeline Status: SUCCESS" >> $GITHUB_STEP_SUMMARY
-            if [ "${{ github.event_name }}" != "pull_request" ]; then
-              echo "" >> $GITHUB_STEP_SUMMARY
-              echo "### 🐳 Docker Images Published" >> $GITHUB_STEP_SUMMARY
+            echo "" >> $GITHUB_STEP_SUMMARY
+            echo "### 🐳 Docker Images Published" >> $GITHUB_STEP_SUMMARY
+            if [ "${{ github.event_name }}" == "pull_request" ]; then
+              echo "- Docker Hub: \`${{ env.REGISTRY_IMAGE }}:PR-${{ github.event.number }}\`" >> $GITHUB_STEP_SUMMARY
+              echo "- GitHub Packages: \`${{ env.GITHUB_IMAGE }}:PR-${{ github.event.number }}\`" >> $GITHUB_STEP_SUMMARY
+            else
               echo "- Docker Hub: \`${{ env.REGISTRY_IMAGE }}:${{ needs.test-and-build.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
               echo "- GitHub Packages: \`${{ env.GITHUB_IMAGE }}:${{ needs.test-and-build.outputs.version }}\`" >> $GITHUB_STEP_SUMMARY
             fi