2525 matrix :
2626 branch :
2727 - dev
28- - v0.12.4
28+ - staging
2929 webserver :
3030 - nginx
3131
4141 - name : Checkout repository
4242 uses : actions/checkout@v4.2.2
4343
44- # Install the cosign tool except on PR
45- # https://github.com/sigstore/cosign-installer
46- - name : Install cosign
47- if : github.event_name != 'pull_request'
48- uses : sigstore/cosign-installer@v3.7.0
49- with :
50- cosign-release : " v2.4.1"
51-
52- # Login against a Docker registry except on PR
53- # https://github.com/docker/login-action
54- - name : Log into registry ${{ env.REGISTRY }}
55- if : github.event_name != 'pull_request'
56- uses : docker/login-action@v3.3.0
57- with :
58- registry : ${{ env.REGISTRY }}
59- username : ${{ github.actor }}
60- password : ${{ secrets.PACKAGE_TOKEN }}
61-
6244 - name : Set up Docker Buildx
6345 uses : docker/setup-buildx-action@v3.8.0
6446
6850 username : ${{ secrets.DOCKERHUB_USERNAME }}
6951 password : ${{ secrets.DOCKERHUB_TOKEN }}
7052
71- # Extract metadata (tags, labels) for Docker
72- # https://github.com/docker/metadata-action
73- - name : Extract Docker metadata
74- id : docker_meta
75- uses : docker/metadata-action@v5.6.1
76- with :
77- images : ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
78- tags : |
79- type=raw,value=${{ matrix.branch }}
80- flavor : |
81- suffix=-${{ matrix.webserver }}
82-
8353 # Build and push Docker image with Buildx (don't push on PR)
8454 # https://github.com/docker/build-push-action
8555 - name : Build and push Docker image
@@ -90,15 +60,10 @@ jobs:
9060 build-args : |
9161 BRANCH=${{ matrix.branch }}
9262 push : true
93- tags : ${{ steps.docker_meta.outputs.tags }}
63+ tags : |
64+ jessebot/pixelfed-glitch
9465 labels : ${{ steps.docker_meta.outputs.labels }}
9566 cache-from : type=gha
9667 cache-to : type=gha,mode=max
9768 file : Dockerfile.${{ matrix.webserver }}
9869 platforms : linux/amd64,linux/arm64
99-
100- - name : Sign the images with GitHub OIDC Token
101- env :
102- DIGEST : ${{ steps.build-and-push.outputs.digest }}
103- TAGS : ${{ steps.docker_meta.outputs.tags }}
104- run : cosign sign --yes "${TAGS}@${DIGEST}"
0 commit comments