ci: add input for pushing image

PR from @p5 applied as a patch

Signed-off-by: Tulip Blossom <tulilirockz@posteo.com>

Author: Tulip Blossom

.github/workflows/build-image-beta.yml

@@ -27,6 +27,7 @@ jobs:
     with:
       brand_name: ${{ matrix.brand_name }}
       stream_name: beta
+      push: ${{ github.event_name != "pull_request" }}
 
   generate-release:
     name: Generate Release

.github/workflows/build-image-gts.yml

@@ -27,6 +27,7 @@ jobs:
       # kernel_pin: 6.14.11-200.fc41.x86_64    ## This is where kernels get pinned.
       brand_name: ${{ matrix.brand_name }}
       stream_name: gts
+      push: ${{ github.event_name != "pull_request" }}
 
   generate_release:
     name: Generate Release

.github/workflows/build-image-latest-hwe.yml

@@ -18,6 +18,7 @@ jobs:
       image_flavors: '["hwe", "hwe-nvidia", "hwe-nvidia-open"]'
       brand_name: ${{ matrix.brand_name }}
       stream_name: latest
+      push: ${{ github.event_name != "pull_request" }}
 
   generate-release:
     name: Generate Release

.github/workflows/build-image-latest-main.yml

@@ -26,6 +26,7 @@ jobs:
       image_flavors: '["main", "nvidia", "nvidia-open"]'
       brand_name: ${{ matrix.brand_name }}
       stream_name: latest
+      push: ${{ github.event_name != "pull_request" }}
 
   generate-release:
     name: Generate Release

.github/workflows/build-image-stable.yml

@@ -28,6 +28,7 @@ jobs:
       # kernel_pin: 6.14.11-300.fc42.x86_64 ## This is where kernels get pinned.
       brand_name: ${{ matrix.brand_name }}
       stream_name: stable
+      push: ${{ github.event_name != "pull_request" }}
 
   generate-release:
     name: Generate Release

.github/workflows/reusable-build.yml

@@ -18,6 +18,10 @@ on:
       kernel_pin:
         description: "The full kernel version to pin"
         type: string
+      push:
+        description: "Whether the image should be pushed to a registry"
+        type: string
+        default: false
 
 env:
   IMAGE_REGISTRY: ghcr.io/${{ github.repository_owner }}
@@ -170,14 +174,14 @@ jobs:
           string: ${{ env.IMAGE_REGISTRY }}
 
       - name: Login to GitHub Container Registry
-        if: github.event_name != 'pull_request'
+        if: inputs.push == "true"
         run: |
           echo ${{ secrets.GITHUB_TOKEN }} | podman login ghcr.io -u ${{ github.actor }} --password-stdin
           echo ${{ secrets.GITHUB_TOKEN }} | docker login ghcr.io -u ${{ github.actor }} --password-stdin
 
       - name: Push to GHCR
         id: push
-        if: github.event_name != 'pull_request'
+        if: inputs.push == "true"
         uses: Wandalen/wretry.action@e68c23e6309f2871ca8ae4763e7629b9c258e1ea # v3.8.0
         with:
           attempt_limit: 3
@@ -219,7 +223,7 @@ jobs:
           COSIGN_PRIVATE_KEY: ${{ secrets.SIGNING_SECRET }}
 
       - name: Sign container image
-        if: github.event_name != 'pull_request' && contains(matrix.image_flavor, 'hwe')
+        if: inputs.push == "true" && contains(matrix.image_flavor, 'hwe')
         shell: bash
         run: |
           image_name="${{ env.IMAGE_NAME }}"