constellation/.github/workflows/build-apko-image.yml

40 lines
1.4 KiB
YAML
Raw Normal View History

name: Build and upload all apko container base images
on:
workflow_dispatch:
push:
branches:
- main
paths:
- "apko/**"
- ".github/workflows/build-apko-image.yml"
jobs:
build-apko-image:
runs-on: ubuntu-22.04
permissions:
contents: read
packages: write
steps:
- name: Check out repository
id: checkout
uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3.3.0
with:
ref: ${{ github.head_ref }}
- name: Get pseudo version
id: pseudo-version
uses: ./.github/actions/pseudo_version
- name: Build and upload apko image
uses: ./.github/actions/build_apko
with:
containerTags: |
${{ steps.pseudo-version.outputs.pseudoVersion }}
${{ github.ref_name == 'main' && 'latest' || github.ref_name }}
registry: ghcr.io
githubToken: ${{ secrets.GITHUB_TOKEN }}
cosignPublicKey: ${{ startsWith(github.ref, 'refs/heads/release/v') && secrets.COSIGN_PUBLIC_KEY || secrets.COSIGN_DEV_PUBLIC_KEY }}
cosignPrivateKey: ${{ startsWith(github.ref, 'refs/heads/release/v') && secrets.COSIGN_PRIVATE_KEY || secrets.COSIGN_DEV_PRIVATE_KEY }}
cosignPassword: ${{ startsWith(github.ref, 'refs/heads/release/v') && secrets.COSIGN_PASSWORD || secrets.COSIGN_DEV_PASSWORD }}