Build a docker image in the publish workflow

Author: victorshevtsov

.github/workflows/publish.yml

@@ -5,14 +5,18 @@ name: Publish
 on:
   push:
     tags:
-      - "v*"
+      - 'v[0-9]*.[0-9]*.[0-9]*' # Matches semver tags in the format of v1.2.3
+      - 'v[0-9]*.[0-9]*.[0-9]*-*' # Matches semver tags in the format of v1.2.3-beta
+
+env:
+  IMAGE_NAME: ghcr.io/usherlabs/cex-broker
 
 permissions:
   contents: read
   id-token: write
 
 jobs:
-  publish:
+  publish-npm:
     runs-on: ubuntu-latest
 
     steps:
@@ -50,4 +54,39 @@ jobs:
         run: bun run build
 
       - name: Publish to npm
-        run: npm publish --provenance --access public
+        run: npm publish --provenance --access public
+
+  publish-docker:
+    runs-on: ubuntu-latest
+    needs: publish-npm
+    steps:
+      - name: Checkout repo
+        uses: actions/checkout@v4
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GitHub Container Registry
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ${{ env.IMAGE_NAME }}
+          tags: |
+            type=match,pattern=v(\d+\.\d+\.\d+.*),group=1
+  
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: Dockerfile
+          push: true
+          tags: |
+            ${{ env.IMAGE_NAME }}:${{ fromJSON(steps.meta.outputs.json).tag-names[0] }}
+            ${{ env.IMAGE_NAME }}:latest

Dockerfile

@@ -0,0 +1,11 @@
+FROM oven/bun:1.3
+
+WORKDIR /app
+
+RUN apt-get update -y \
+  && apt-get install -y --no-install-recommends ca-certificates curl \
+  && rm -rf /var/lib/apt/lists/*
+
+RUN bun install --global @usherlabs/cex-broker@0.2.5
+
+CMD ["cex-broker"]