publish-containers.yml

name: Publish Containers

permissions:
  contents: read
  packages: write

on:
  workflow_call:
    inputs:
      plan:
        required: true
        type: string
  workflow_dispatch:
    inputs:
      tag:
        description: 'Version tag to publish (e.g. v0.8.1)'
        required: true
        type: string
      latest_release:
        description: 'Also tag this image as latest'
        required: false
        type: boolean
        default: false

jobs:
  publish-containers:
    name: Publish Container Images
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0  # v7.0.0
      - name: Resolve version
        id: version
        env:
          PLAN: ${{ inputs.plan }}
          MANUAL_TAG: ${{ inputs.tag }}
        run: |
          if [[ -n "$PLAN" ]]; then
            ANNOUNCEMENT_TAG="$(echo "$PLAN" | jq -r '.announcement_tag')"
            echo "tag_latest=true" >> "$GITHUB_OUTPUT"
          else
            ANNOUNCEMENT_TAG="$MANUAL_TAG"
            echo "tag_latest=${{ inputs.latest_release }}" >> "$GITHUB_OUTPUT"
          fi
          echo "tag=${ANNOUNCEMENT_TAG#v}" >> "$GITHUB_OUTPUT"
      - name: Set up QEMU
        uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3  # v41.0
      - name: Login to Docker Hub
        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f  # v4.6.0
        with:
          username: ${{ secrets.DOCKER_HUB_USERNAME }}
          password: ${{ secrets.DOCKER_HUB_TOKEN }}
      - name: Login to GitHub Container Registry
        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f  # v4.6.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Build & Push Container Images
        env:
          CONTAINER_TAG: ${{ steps.version.outputs.tag }}
          PUSH_IMAGE: "true"
          TAG_LATEST: ${{ steps.version.outputs.tag_latest }}
        run: ./build
        working-directory: ./docker