config/.github/workflows/image-devcontainer-base.yml at main · marinatedconcrete/config · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
---
name: Build Devcontainer Base Image

on: # yamllint disable-line rule:truthy
  pull_request:
    branches:
      - main
    paths:
      - .github/workflows/image-devcontainer-base.yml
      - images/devcontainer-base/**
  push:
    branches:
      - main
    paths:
      - .github/workflows/image-devcontainer-base.yml
      - images/devcontainer-base/**
  schedule:
    - cron: "0 0 * * 0" # Triggers every Sunday at midnight UTC

concurrency:
  cancel-in-progress: true
  group: devcontainer-base-${{ github.ref }}

jobs:
  build-container:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    env:
      DEVCONTAINER_BASE_TAG: candidate-${{ github.sha }}

    steps:
      - name: Checkout Repo
        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
      - name: Login to GitHub Container Registry
        uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Build Candidate Image
        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
        with:
          context: images/devcontainer-base
          file: images/devcontainer-base/Containerfile
          load: true
          push: false
          tags: ghcr.io/${{ github.repository_owner }}/devcontainer-base:${{ env.DEVCONTAINER_BASE_TAG }}
      - name: Validate Full CI Pipeline
        uses: devcontainers/ci@513af61f4de4f75d37e4438f184ba4358f0fc1ca # v0.3.1900000450
        with:
          cacheFrom: ghcr.io/marinatedconcrete/config-devcontainer
          env: |
            CI=1
          imageName: config-devcontainer-candidate
          push: never
          runCmd: just check-format && just lint && just test
      - name: Push Tested Image
        if: github.event_name != 'pull_request'
        run: |
          docker tag \
            "ghcr.io/${{ github.repository_owner }}/devcontainer-base:${DEVCONTAINER_BASE_TAG}" \
            ghcr.io/${{ github.repository_owner }}/devcontainer-base:latest
          docker push ghcr.io/${{ github.repository_owner }}/devcontainer-base:latest