Move to ghcr

Author: joecorall

.github/workflows/lint-test-build.yml

@@ -1,52 +1,47 @@
-name: lint-test-build-push
+name: build-push
 on:
   push:
-    paths-ignore:
-      - "**/*.md"
-      - "renovate.json5"
-    branches:
-      - "**"
-    tags:
-      - "*"
-
-concurrency:
-  group: ${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: true
-
-permissions:
-  contents: read
+  workflow_dispatch:
+
 jobs:
   lint-test:
     runs-on: ubuntu-24.04
     steps:
-      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
-
-      - name: check valid yml
-        run: yq . *.yaml
+      - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6
 
-      - uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6
+      - name: Set up Go
+        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
         with:
-          go-version: ">=1.25.0"
+          go-version-file: "go.mod"
 
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@0a35821d5c230e903fcfe077583637dea1b27b47 # v9
+        uses: golangci/golangci-lint-action@e7fa5ac41e1cf5b7d48e45e42232ce7ada589601 # v9
         with:
           version: latest
 
       - name: Install dependencies
         run: go get .
 
-      - name: Build
-        run: go build -v ./...
+      - run: go build
+
+      - name: unit test
+        run: go test -race -v ./...
 
-      - name: Test with the Go CLI
-        run: go test -v -race ./...
+      - name: coverage
+        run: go test -v -coverprofile=coverage.out -covermode=atomic ./...
+
+      - name: upload coverage to codecov
+        uses: codecov/codecov-action@5a1091511ad55cbe89839c7260b706298ca349f7 # v5
+        with:
+          files: ./coverage.out
+          fail_ci_if_error: false
+        env:
+          CODECOV_TOKEN: ${{ secrets.CODECOV_TOKEN }}
 
-  build-push:
+  run:
     needs: [lint-test]
-    uses: libops/actions/.github/workflows/build-push.yml@main
+    uses: libops/.github/.github/workflows/build-push-ghcr.yaml@main
     permissions:
       contents: read
       packages: write
-      id-token: write
     secrets: inherit

Dockerfile

@@ -1,11 +1,19 @@
-FROM golang:1.25-alpine3.22@sha256:d3f0cf7723f3429e3f9ed846243970b20a2de7bae6a5b66fc5914e228d831bbb
+FROM ghcr.io/libops/go1.25:main@sha256:f43c9b34f888d2ac53e87c8e061554f826b8eb580863d7b21fd787b6f0378f8f AS builder
+
+SHELL ["/bin/ash", "-o", "pipefail", "-ex", "-c"]
 
 WORKDIR /app
 
-COPY . ./
+COPY go.* ./
+RUN --mount=type=cache,target=/go/pkg/mod \
+    go mod download
+
+COPY *.go ./
+
+RUN --mount=type=cache,target=/root/.cache/go-build \
+    CGO_ENABLED=0 go build -ldflags="-s -w" -o /app/binary .
+
+FROM ghcr.io/libops/go1.25:main@sha256:f43c9b34f888d2ac53e87c8e061554f826b8eb580863d7b21fd787b6f0378f8f
 
-RUN go mod download \
-    && go build -o /app/ppb  \
-    && go clean -cache -modcache
+COPY --from=builder /app/binary /app/binary
 
-ENTRYPOINT ["/app/ppb"]