add build pipeline

Author: karmaking

.github/workflows/build_container_image.yml

@@ -0,0 +1,45 @@
+name: build and publish container
+
+on:
+  push:
+    branches:
+    - main
+
+env:
+  DOCKER_HUB_ORGANIZATION: ${{ vars.DOCKER_HUB_ORGANIZATION }}
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+
+      - uses: actions/checkout@v4
+      - name: Build the Docker images with latest tag
+        run: |
+          echo "${{ secrets.DOCKER_HUB_TOKEN }}" | docker login -u "${{ secrets.DOCKER_HUB_USERNAME }}" --password-stdin docker.io
+          docker build . -f Dockerfile_portal --tag docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/OBP-Portal:$GITHUB_SHA --tag docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/OBP-Portal:main --tag docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/OBP-Portal:latest
+          docker build . -f Dockerfile_apimanager  --tag docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/API-Manager-II:$GITHUB_SHA --tag docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/API-Manager-II:main --tag docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/API-Manager-II:latest
+          docker push docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/OBP-Portal --all-tags
+          docker push docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/API-Manager-II --all-tags
+          echo docker obp-portal with latest tag done
+
+      - uses: sigstore/cosign-installer@main
+      - name: Write signing key to disk (only needed for `cosign sign --key`)
+        run: echo "${{ secrets.COSIGN_PRIVATE_KEY }}" > cosign.key
+      - name: Sign container image with annotations from our environment
+        env:
+          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
+        run: |
+          cosign sign -y --key cosign.key \
+            -a "repo=${{ github.repository }}" \
+            -a "workflow=${{ github.workflow }}" \
+            -a "ref=${{ github.sha }}" \
+            docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/OBP-Portal:main;\
+          cosign sign -y --key cosign.key \
+            -a "repo=${{ github.repository }}" \
+            -a "workflow=${{ github.workflow }}" \
+            -a "ref=${{ github.sha }}" \
+            docker.io/${{ env.DOCKER_HUB_ORGANIZATION }}/API-Manager-II:main
+
+
+