SparkyFitness/.github/workflows/docker-deploy.yml at main · nitinkp470/SparkyFitness · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
name: Publish Docker frontend image

on:
  release:
    types: [published]
  workflow_dispatch:

jobs:
  push_to_registries:
    name: Push Docker image to multiple registries
    runs-on: ubuntu-latest
    environment: github-pages
    permissions:
      packages: write
      contents: read
      attestations: write
      id-token: write

    steps:
      - name: Check out the repo
        uses: actions/checkout@v4

      - name: Get latest release tag
        id: get_latest_release
        uses: actions/github-script@v6
        with:
          script: |
            const { data: releases } = await github.rest.repos.listReleases({
              owner: context.repo.owner,
              repo: context.repo.repo,
            });
            const latestRelease = releases.find(release => !release.prerelease && !release.draft);
            if (latestRelease) {
              core.setOutput('tag', latestRelease.tag_name);
            } else {
              core.setOutput('tag', 'latest'); // Fallback if no releases found
            }
          result-encoding: string

      - name: Log in to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Log in to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Metadata frontend
        id: meta-frontend
        uses: docker/metadata-action@v5
        with:
          images: |
            codewithcj/sparkyfitness
            ghcr.io/${{ github.repository }}-frontend
          tags: |
            type=raw,value=${{ steps.get_latest_release.outputs.tag }}
            type=raw,value=latest

      - name: Build and push frontend
        id: push-frontend
        uses: docker/build-push-action@v6
        with:
          context: .
          file: docker/Dockerfile.frontend
          push: true
          tags: ${{ steps.meta-frontend.outputs.tags }}
          labels: ${{ steps.meta-frontend.outputs.labels }}
          platforms: linux/amd64,linux/arm64

      - name: Generate artifact attestation Frontend
        uses: actions/attest-build-provenance@v2
        with:
          subject-name: ghcr.io/${{ github.repository }}-frontend
          subject-digest: ${{ steps.push-frontend.outputs.digest }}
          push-to-registry: true

      - name: Metadata server
        id: meta-server
        uses: docker/metadata-action@v5
        with:
          images: |
            codewithcj/sparkyfitness_server
            ghcr.io/${{ github.repository }}-server
          tags: |
            type=raw,value=${{ steps.get_latest_release.outputs.tag }}
            type=raw,value=latest

      - name: Build and push server
        id: push-server
        uses: docker/build-push-action@v6
        with:
          context: SparkyFitnessServer
          file: docker/Dockerfile.backend
          push: true
          tags: ${{ steps.meta-server.outputs.tags }}
          labels: ${{ steps.meta-server.outputs.labels }}
          platforms: linux/amd64,linux/arm64

      - name: Generate artifact attestation server
        uses: actions/attest-build-provenance@v2
        with:
          subject-name: ghcr.io/${{ github.repository }}-server
          subject-digest: ${{ steps.push-server.outputs.digest }}
          push-to-registry: true

      - name: Metadata Garmin Microservice
        id: meta-garmin
        uses: docker/metadata-action@v5
        with:
          images: |
            codewithcj/sparkyfitness_garmin
            ghcr.io/${{ github.repository }}-garmin
          tags: |
            type=raw,value=${{ steps.get_latest_release.outputs.tag }}
            type=raw,value=latest

      - name: Build and push Garmin Microservice
        id: push-garmin
        uses: docker/build-push-action@v6
        with:
          context: SparkyFitnessGarmin
          file: docker/Dockerfile.garmin_microservice
          push: true
          tags: ${{ steps.meta-garmin.outputs.tags }}
          labels: ${{ steps.meta-garmin.outputs.labels }}
          platforms: linux/amd64,linux/arm64

      - name: Generate artifact attestation Garmin Microservice
        uses: actions/attest-build-provenance@v2
        with:
          subject-name: ghcr.io/${{ github.repository }}-garmin
          subject-digest: ${{ steps.push-garmin.outputs.digest }}
          push-to-registry: true