name: Publish Docker Image on: push: branches: - main tags: - 'v*.*.*' - 'v*.*.*-*' # For pre-releases like v1.2.3-beta paths-ignore: - 'documentation/**' - '*.md' workflow_dispatch: permissions: contents: read packages: write jobs: docker: runs-on: ubuntu-latest steps: - name: Checkout code uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # pin@v4 - name: Set up Docker Buildx uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # pin@v3.11.1 - name: Log in to GitHub Container Registry uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # pin@v3.5.0 with: registry: ghcr.io username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} - name: Extract metadata id: meta uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # pin@v5.8.0 with: images: ghcr.io/${{ github.repository_owner }}/goose tags: | # For main branch: latest, main, and sha type=ref,event=branch type=sha,prefix=sha- type=raw,value=latest,enable={{is_default_branch}} # For tags: v1.2.3 -> 1.2.3, 1.2, 1, latest (if not pre-release) type=semver,pattern={{version}} type=semver,pattern={{major}}.{{minor}} type=semver,pattern={{major}} # For pre-release tags: keep the full version type=raw,value={{tag}},enable=${{ startsWith(github.ref, 'refs/tags/v') }} - name: Build and push Docker image uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # pin@v6.18.0 with: context: . push: true tags: ${{ steps.meta.outputs.tags }} labels: ${{ steps.meta.outputs.labels }} cache-from: type=gha cache-to: type=gha,mode=max platforms: linux/amd64,linux/arm64