evo-ai-core-service-community/.github/workflows/docker-publish.yml at 33230bb8e6328939dd067d1dc326bdd8335d0734 · EvolutionAPI/evo-ai-core-service-community · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
name: Build & Publish Docker Image

on:
  push:
    branches: [main]
    tags: ["v*.*.*"]

permissions:
  contents: read

env:
  IMAGE_NAME: evoapicloud/evo-ai-core-service-community

jobs:
  build:
    name: Build ${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}
    runs-on: ${{ matrix.runner }}
    strategy:
      fail-fast: false
      matrix:
        include:
          - platform: linux/amd64
            runner: ubuntu-latest
          - platform: linux/arm64
            runner: ubuntu-24.04-arm
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

      - uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0

      - uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build and push by digest
        id: build
        uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 # v6.16.0
        with:
          context: .
          file: ./Dockerfile
          platforms: ${{ matrix.platform }}
          push: true
          provenance: mode=max
          sbom: true
          outputs: type=image,name=${{ env.IMAGE_NAME }},push-by-digest=true,name-canonical=true
          cache-from: type=gha,scope=${{ matrix.platform }}
          cache-to: type=gha,scope=${{ matrix.platform }},mode=max

      - name: Export digest
        run: |
          mkdir -p /tmp/digests
          digest="${{ steps.build.outputs.digest }}"
          touch "/tmp/digests/${digest#sha256:}"

      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
        with:
          name: digest-${{ matrix.platform == 'linux/amd64' && 'amd64' || 'arm64' }}
          path: /tmp/digests/*
          retention-days: 1

  merge:
    name: Merge Manifests & Tag
    needs: build
    runs-on: ubuntu-latest
    steps:
      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
        with:
          pattern: digest-*
          path: /tmp/digests
          merge-multiple: true

      - uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0

      - uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Resolve tags
        id: tags
        env:
          GH_REF: ${{ github.ref }}
          GH_REF_NAME: ${{ github.ref_name }}
          GH_SHA: ${{ github.sha }}
        run: |
          IMAGE="${{ env.IMAGE_NAME }}"
          SHA_SHORT="${GH_SHA:0:7}"
          TAGS=""

          if [[ "${GH_REF}" == refs/tags/v* ]]; then
            VERSION="${GH_REF_NAME#v}"
            TAGS="${IMAGE}:${VERSION},${IMAGE}:latest"
          elif [[ "${GH_REF}" == refs/heads/main ]]; then
            TAGS="${IMAGE}:latest,${IMAGE}:main-${SHA_SHORT}"
          fi

          echo "tags=${TAGS}" >> "$GITHUB_OUTPUT"

      - name: Create and push manifest
        working-directory: /tmp/digests
        env:
          MERGE_TAGS: ${{ steps.tags.outputs.tags }}
        run: |
          IFS=',' read -ra TAG_ARRAY <<< "${MERGE_TAGS}"
          TAG_ARGS=""
          for tag in "${TAG_ARRAY[@]}"; do
            TAG_ARGS="${TAG_ARGS} -t ${tag}"
          done

          docker buildx imagetools create ${TAG_ARGS} \
            $(printf '${{ env.IMAGE_NAME }}@sha256:%s ' *)