Extend GHA to push images that pass tests

For push actions only (e.g., post-PR merge), after successfully
completing the behave-test step, Log into GitHub container registry
(ghcr.io) and push the image.

Add the necessary permissions to write to the GHCR repository.

Adjust the build and test steps to use a predictable,
version-independent image name ("localimage") which we can reference
in the new steps.

Signed-off-by: Jonathan Dowland <[email protected]>

Author: jmtd

.github/workflows/image-workflow-template.yml

@@ -7,8 +7,11 @@ on:
         type: string
 env:
   LANG: en_US.UTF-8
+  IMAGE_URI: ghcr.io/jboss-container-images/${{ inputs.image }}:${{ github.ref_name }}
 jobs:
   openjdkci:
+    permissions:
+      packages: write
     name: OpenJDK S2I Build and Test
     runs-on: ubuntu-20.04
     strategy:
@@ -23,7 +26,7 @@ jobs:
 
       - name: Build
         run: |
-          cekit -v --descriptor ${{ inputs.image }}.yaml build docker --no-squash
+          cekit -v --descriptor ${{ inputs.image }}.yaml build docker --no-squash --tag localimage
 
       - name: Install and cache S2I CLI tool from GitHub
         uses: redhat-actions/openshift-tools-installer@v1
@@ -35,4 +38,18 @@ jobs:
       - name: Behave Tests
         run: |
           echo /home/runner/work/_temp/openshift-bin >> $GITHUB_PATH
-          cekit -v --descriptor ${{ inputs.image }}.yaml test behave
+          cekit -v --descriptor ${{ inputs.image }}.yaml test --image localimage behave
+
+      - if: github.event_name == 'push'
+        name: Log in to the Container registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - if: github.event_name == 'push'
+        name: Tag and push container image
+        run: |
+          docker tag localimage ${{ env.IMAGE_URI }}
+          docker push ${{ env.IMAGE_URI }}