Updating devdependencies so it will work, postgres pinning to alpine … #24
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
name: Create and publish a Docker image | |
on: | |
push: | |
branches: | |
- feature/ci-lighthouse-bench | |
- main | |
tags: | |
- 'v*' | |
concurrency: | |
group: "publish" | |
env: | |
REGISTRY: ghcr.io | |
IMAGE_NAME: ${{ github.repository }} | |
jobs: | |
build-and-push-image: | |
runs-on: ubuntu-latest | |
permissions: | |
contents: read | |
packages: write | |
attestations: write | |
id-token: write | |
steps: | |
- name: Checkout repository | |
uses: actions/checkout@v4 | |
- name: Log in to the Container registry | |
uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1 | |
with: | |
registry: ${{ env.REGISTRY }} | |
username: ${{ github.actor }} | |
password: ${{ secrets.DOCKER_TOKEN }} | |
- name: Set up Docker Buildx | |
uses: docker/setup-buildx-action@v3 | |
- name: Extract metadata (tags, labels) for Frontend | |
id: frontend-meta | |
uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7 | |
with: | |
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-frontend | |
tags: | | |
type=ref,event=branch | |
type=ref,event=pr | |
type=semver,pattern={{version}} | |
type=semver,pattern={{major}}.{{minor}} | |
- name: Build and push Frontend | |
id: frontend | |
uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4 | |
with: | |
context: ./frontend | |
file: ./frontend/Dockerfile.prod | |
cache-from: type=gha | |
cache-to: type=gha,mode=max | |
github-token: ${{ secrets.DOCKER_TOKEN }} | |
push: true | |
tags: ${{ steps.frontend-meta.outputs.tags }},${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-frontend:latest | |
labels: ${{ steps.frontend-meta.outputs.labels }} | |
- name: Generate artifact attestation Frontend | |
uses: actions/attest-build-provenance@v1 | |
with: | |
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}-frontend | |
subject-digest: ${{ steps.frontend.outputs.digest }} | |
push-to-registry: true | |
- name: Extract metadata (tags, labels) for Backend | |
id: backend-meta | |
uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7 | |
with: | |
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-backend | |
- name: Build and push Backend | |
id: backend | |
uses: docker/build-push-action@f2a1d5e99d037542a71f64918e516c093c6f3fc4 | |
with: | |
context: ./backend | |
file: ./backend/Dockerfile | |
cache-from: type=gha | |
cache-to: type=gha,mode=max | |
github-token: ${{ secrets.DOCKER_TOKEN }} | |
push: true | |
tags: ${{ steps.backend-meta.outputs.tags }},${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}-backend:latest | |
labels: ${{ steps.backend-meta.outputs.labels }} | |
- name: Generate artifact attestation Backend | |
uses: actions/attest-build-provenance@v1 | |
with: | |
subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}-backend | |
subject-digest: ${{ steps.backend.outputs.digest }} | |
push-to-registry: true |