publish-image.yml

name: Publish Image

on:
  workflow_dispatch:
    inputs:
      image_tags:
        description: Comma-separated tags to publish. Defaults to staging-SHORTSHA,SHORTSHA.
        required: false
        type: string
        default: ""
  push:
    tags:
      - "staging-*"
      - "v*"

permissions:
  contents: read

concurrency:
  group: publish-image-${{ github.ref }}
  cancel-in-progress: false

jobs:
  publish:
    runs-on: ubuntu-latest
    env:
      IMAGE_NAME: skel84/allocdb

    steps:
      - name: Check out repository
        uses: actions/checkout@v4

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Resolve tags
        id: tags
        shell: bash
        run: |
          set -euo pipefail
          short_sha="${GITHUB_SHA::7}"

          if [[ "${GITHUB_EVENT_NAME}" == "workflow_dispatch" ]]; then
            raw_tags="${{ inputs.image_tags }}"
            if [[ -z "${raw_tags}" ]]; then
              raw_tags="staging-${short_sha},${short_sha}"
            fi
          else
            raw_tags="${GITHUB_REF_NAME},${short_sha}"
          fi

          IFS=',' read -ra tags <<< "${raw_tags}"
          {
            echo "tags<<EOF"
            for tag in "${tags[@]}"; do
              trimmed="$(echo "${tag}" | xargs)"
              [[ -n "${trimmed}" ]] || continue
              echo "${IMAGE_NAME}:${trimmed}"
            done
            echo "EOF"
          } >> "${GITHUB_OUTPUT}"

      - name: Build and push image
        uses: docker/build-push-action@v6
        with:
          context: .
          platforms: linux/amd64
          push: true
          tags: ${{ steps.tags.outputs.tags }}
          cache-from: type=gha
          cache-to: type=gha,mode=max