Update docker/build-push-action action to v7.3.0 #102
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Latest | |
| on: | |
| workflow_dispatch: | |
| pull_request: | |
| paths: | |
| - .github/workflows/latest.yaml | |
| - latest/** | |
| push: | |
| branches: | |
| - main | |
| paths: | |
| - .github/workflows/latest.yaml | |
| - latest/** | |
| env: | |
| AWS_REGION: us-east-1 | |
| DOCKERHUB_SLUG: composer/composer | |
| ECR_SLUG: public.ecr.aws/u0u1j5s3/composer | |
| GHCR_SLUG: ghcr.io/composer/docker | |
| DIRECTORY: latest | |
| permissions: | |
| contents: read | |
| concurrency: | |
| group: ${{ github.workflow }}-${{ github.ref }} | |
| cancel-in-progress: true | |
| jobs: | |
| prepare: | |
| name: "Prepare metadata" | |
| runs-on: ubuntu-latest | |
| outputs: | |
| full-annotations: ${{ steps.meta-full.outputs.annotations }} | |
| full-labels: ${{ steps.meta-full.outputs.labels }} | |
| full-json: ${{ steps.meta-full.outputs.json }} | |
| bin-annotations: ${{ steps.meta-bin.outputs.annotations }} | |
| bin-labels: ${{ steps.meta-bin.outputs.labels }} | |
| bin-json: ${{ steps.meta-bin.outputs.json }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Determine Composer version from Dockerfile | |
| id: composer-version | |
| uses: ./.github/actions/determine-composer-version | |
| with: | |
| working-directory: ${{ env.DIRECTORY }} | |
| - name: Docker metadata (full image) | |
| id: meta-full | |
| uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0 | |
| with: | |
| images: | | |
| ${{ env.DOCKERHUB_SLUG }} | |
| ${{ env.ECR_SLUG }} | |
| ${{ env.GHCR_SLUG }} | |
| flavor: | | |
| latest=false | |
| tags: | | |
| type=semver,pattern={{version}},value=${{ steps.composer-version.outputs.major-minor-patch }} | |
| type=semver,pattern={{major}}.{{minor}},value=${{ steps.composer-version.outputs.major-minor-patch }} | |
| type=semver,pattern={{major}},value=${{ steps.composer-version.outputs.major-minor-patch }} | |
| latest | |
| labels: | | |
| org.opencontainers.image.vendor=Composer | |
| org.opencontainers.image.title=Composer | |
| org.opencontainers.image.description=PHP runtime image with Composer | |
| - name: Docker metadata (binary-only image) | |
| id: meta-bin | |
| uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0 | |
| with: | |
| images: | | |
| ${{ env.DOCKERHUB_SLUG }} | |
| ${{ env.ECR_SLUG }} | |
| ${{ env.GHCR_SLUG }} | |
| flavor: | | |
| latest=false | |
| suffix=-bin | |
| tags: | | |
| type=semver,pattern={{version}},value=${{ steps.composer-version.outputs.major-minor-patch }} | |
| type=semver,pattern={{major}}.{{minor}},value=${{ steps.composer-version.outputs.major-minor-patch }} | |
| type=semver,pattern={{major}},value=${{ steps.composer-version.outputs.major-minor-patch }} | |
| latest | |
| labels: | | |
| org.opencontainers.image.vendor=Composer | |
| org.opencontainers.image.title=Composer | |
| org.opencontainers.image.description=Image with Composer binary only | |
| build: | |
| name: "Build images" | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 20 | |
| permissions: | |
| contents: read | |
| packages: write # pushes image layers to ghcr.io via GITHUB_TOKEN | |
| needs: | |
| - prepare | |
| strategy: | |
| matrix: | |
| platform: | |
| - linux/amd64 | |
| - linux/arm/v6 | |
| - linux/arm/v7 | |
| - linux/arm64/v8 | |
| - linux/i386 | |
| - linux/ppc64le | |
| - linux/riscv64 | |
| - linux/s390x | |
| defaults: | |
| run: | |
| working-directory: ${{ env.DIRECTORY }} | |
| steps: | |
| - name: Checkout | |
| uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| persist-credentials: false | |
| - name: Prepare | |
| env: | |
| PLATFORM: ${{ matrix.platform }} | |
| run: | | |
| echo "PLATFORM_SLUG=${PLATFORM//\//-}" >> "$GITHUB_ENV" | |
| - name: Set up QEMU | |
| uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0 | |
| with: | |
| platforms: ${{ matrix.platform }} | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 | |
| - name: Login to Docker Hub | |
| if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request' | |
| uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_PASSWORD }} | |
| - name: Login to Amazon Public ECR | |
| if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request' | |
| uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 | |
| with: | |
| registry: public.ecr.aws | |
| username: ${{ secrets.AWS_ECR_ACCESS_KEY }} | |
| password: ${{ secrets.AWS_ECR_SECRET_KEY }} | |
| - name: Login to Github Container Registry | |
| if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request' | |
| uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Build full image | |
| id: build-full | |
| uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 | |
| with: | |
| context: ${{ env.DIRECTORY }} | |
| target: binary-with-runtime | |
| annotations: ${{ needs.prepare.outputs.full-annotations }} | |
| platforms: ${{ matrix.platform }} | |
| outputs: type=image,"name=${{ env.DOCKERHUB_SLUG }},${{ env.ECR_SLUG }},${{ env.GHCR_SLUG }}",push-by-digest=true,name-canonical=true,push=${{ github.ref == 'refs/heads/main' && github.event_name != 'pull_request' }} | |
| - name: Build binary-only image | |
| id: build-bin | |
| uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0 | |
| with: | |
| context: ${{ env.DIRECTORY }} | |
| target: standalone-binary | |
| annotations: ${{ needs.prepare.outputs.bin-annotations }} | |
| platforms: ${{ matrix.platform }} | |
| outputs: type=image,"name=${{ env.DOCKERHUB_SLUG }},${{ env.ECR_SLUG }},${{ env.GHCR_SLUG }}",push-by-digest=true,name-canonical=true,push=${{ github.ref == 'refs/heads/main' && github.event_name != 'pull_request' }} | |
| - name: Export digests | |
| env: | |
| DIGEST_FULL: ${{ steps.build-full.outputs.digest }} | |
| DIGEST_BIN: ${{ steps.build-bin.outputs.digest }} | |
| run: | | |
| mkdir -p /tmp/digests/{full,bin} | |
| touch "/tmp/digests/full/${DIGEST_FULL#sha256:}" | |
| touch "/tmp/digests/bin/${DIGEST_BIN#sha256:}" | |
| - name: Upload digests | |
| uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 | |
| with: | |
| name: digests-${{ env.PLATFORM_SLUG }} | |
| path: | | |
| /tmp/digests/full/* | |
| /tmp/digests/bin/* | |
| if-no-files-found: error | |
| retention-days: 1 | |
| merge: | |
| name: "Merge & push manifests" | |
| if: github.ref == 'refs/heads/main' && github.event_name != 'pull_request' | |
| runs-on: ubuntu-latest | |
| permissions: | |
| contents: read | |
| packages: write # pushes the manifest list to ghcr.io via GITHUB_TOKEN | |
| needs: | |
| - prepare | |
| - build | |
| steps: | |
| - name: Download digests | |
| uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 | |
| with: | |
| path: /tmp/digests | |
| pattern: digests-* | |
| merge-multiple: true | |
| - name: Set up Docker Buildx | |
| uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 | |
| - name: Login to Docker Hub | |
| uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 | |
| with: | |
| username: ${{ secrets.DOCKERHUB_USERNAME }} | |
| password: ${{ secrets.DOCKERHUB_PASSWORD }} | |
| - name: Login to Amazon Public ECR | |
| uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 | |
| with: | |
| registry: public.ecr.aws | |
| username: ${{ secrets.AWS_ECR_ACCESS_KEY }} | |
| password: ${{ secrets.AWS_ECR_SECRET_KEY }} | |
| - name: Login to Github Container Registry | |
| uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 | |
| with: | |
| registry: ghcr.io | |
| username: ${{ github.repository_owner }} | |
| password: ${{ secrets.GITHUB_TOKEN }} | |
| - name: Create manifest list for full image and push | |
| working-directory: /tmp/digests/full | |
| env: | |
| JSON: ${{ needs.prepare.outputs.full-json }} | |
| run: | | |
| docker buildx imagetools create $(jq -cr --arg slug "$DOCKERHUB_SLUG" '.tags | map(select(startswith($slug)) | "--tag " + .) | join(" ")' <<< "$JSON") \ | |
| $(printf "$DOCKERHUB_SLUG@sha256:%s " *) | |
| docker buildx imagetools create $(jq -cr --arg slug "$ECR_SLUG" '.tags | map(select(startswith($slug)) | "--tag " + .) | join(" ")' <<< "$JSON") \ | |
| $(printf "$ECR_SLUG@sha256:%s " *) | |
| docker buildx imagetools create $(jq -cr --arg slug "$GHCR_SLUG" '.tags | map(select(startswith($slug)) | "--tag " + .) | join(" ")' <<< "$JSON") \ | |
| $(printf "$GHCR_SLUG@sha256:%s " *) | |
| - name: Create manifest list for binary-only image and push | |
| working-directory: /tmp/digests/bin | |
| env: | |
| JSON: ${{ needs.prepare.outputs.bin-json }} | |
| run: | | |
| docker buildx imagetools create $(jq -cr --arg slug "$DOCKERHUB_SLUG" '.tags | map(select(startswith($slug)) | "--tag " + .) | join(" ")' <<< "$JSON") \ | |
| $(printf "$DOCKERHUB_SLUG@sha256:%s " *) | |
| docker buildx imagetools create $(jq -cr --arg slug "$ECR_SLUG" '.tags | map(select(startswith($slug)) | "--tag " + .) | join(" ")' <<< "$JSON") \ | |
| $(printf "$ECR_SLUG@sha256:%s " *) | |
| docker buildx imagetools create $(jq -cr --arg slug "$GHCR_SLUG" '.tags | map(select(startswith($slug)) | "--tag " + .) | join(" ")' <<< "$JSON") \ | |
| $(printf "$GHCR_SLUG@sha256:%s " *) |