1- name : Docker
1+ name : Publish Docker image
22
33on :
44 release :
55 types : [published]
66
7- env :
8- REGISTRY : docker.io
9- IMAGE_NAME : ${{ github.repository }}
10-
11-
127jobs :
13- build :
14-
8+ push_to_registry :
9+ name : Push Docker image to Docker Hub
1510 runs-on : ubuntu-latest
16- permissions :
17- contents : read
18- packages : write
19- # This is used to complete the identity challenge
20- # with sigstore/fulcio when running outside of PRs.
21- id-token : write
22-
2311 steps :
24- - name : Checkout repository
25- uses : actions/checkout@v3
26-
27- # Extract metadata (tags, labels) for Docker
28- # https://github.com/docker/metadata-action
29- - name : Extract Docker metadata
30- id : meta
31- uses : docker/metadata-action@98669ae865ea3cffbcbaa878cf57c20bbf1c6c38
32- with :
33- images : ${{ env.REGISTRY }}/angrymeir/secscanner2junit
34- tags : |
35- type=semver,pattern={{version}}
36-
3712 - name : Sleep for 180 seconds # so that the package has been published to PyPI in the meantime
3813 run : sleep 180
3914 shell : bash
4015
41- - name : Kaniko build
42- 16+ - name : Check out the repo
17+ uses : actions/checkout@v4
18+
19+ - name : Log in to Docker Hub
20+ uses : docker/login-action@v3
21+ with :
22+ username : ${{ secrets.DOCKER_USERNAME }}
23+ password : ${{ secrets.DOCKER_PASSWORD }}
24+
25+ - name : Extract metadata (tags, labels) for Docker
26+ id : meta
27+ uses : docker/metadata-action@v5
28+ with :
29+ images : logchange/secscanner2junit
30+
31+ - name : Build and push Docker image
32+ uses : docker/build-push-action@v5
33+ with :
34+ context : .
35+ file : ./Dockerfile
36+ push : true
37+ tags : ${{ steps.meta.outputs.tags }}
38+ labels : ${{ steps.meta.outputs.labels }}
39+ build-args : |
40+ VERSION=${{ github.ref_name }}
41+
42+ - name : Docker Hub Description
43+ uses : peter-evans/dockerhub-description@v3
4344 with :
44- image : ${{ env.REGISTRY }}/angrymeir/secscanner2junit
45- username : ${{ secrets.DOCKERHUB_USERNAME }}
46- password : ${{ secrets.DOCKERHUB_TOKEN }}
47- tag : ${{ github.ref_name }}
48- tag_with_latest : true
49- extra_args : --build-arg=VERSION=${{ github.ref_name }}
45+ username : ${{ secrets.DOCKER_USERNAME }}
46+ password : ${{ secrets.DOCKER_PASSWORD }}
47+ repository : logchange/secscanner2junit
0 commit comments