build.yml

name: Docker Image build CI

on:
  pull_request:
    branches: 
    - master
    paths-ignore:
      - '.github/**'
  push:
    branches: 
    - release/*
    paths-ignore:
      - '.github/**'

  workflow_dispatch:

permissions: 
  contents: write
  pull-requests: write
  discussions: write
  issues: write

jobs:
  build:
    runs-on: floryn90-runners
    permissions:
      id-token: write
      contents: read
      attestations: write

    steps:

      - name: Clean Workspace
        uses: AutoModality/action-clean@v1
        
      - name: Checkout
        uses: actions/checkout@v4

      - name: Install build essential
        uses: ./.github/actions/install_deps  

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Docker login
        uses: docker/login-action@v3
        with:
          username: floryn90
          password: ${{ secrets.DOCKER_TOKEN }}

      - name: Get previous release tag
        id: release_tag
        shell: bash
        run: |
          releases=$(gh api -H "Accept: application/vnd.github+json" -H "X-GitHub-Api-Version: 2022-11-28" /repos/gohugoio/hugo/releases?per_page=1&page=1)
          release_tag=$(echo $releases | jq '.[0].tag_name' | sed 's/v//g' | sed 's/"//g')
          echo "Latest release tag is ${release_tag}"
          echo "latest_release_tag=${release_tag}" >> $GITHUB_OUTPUT
        env:
          GH_TOKEN: ${{ secrets.TOKEN_GITHUB }}

      - name: Docker meta
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: floryn90/hugo

      - name: Prepare
        shell: bash
        run: make prepare

      - name: Build
        shell: bash
        run: make build

      - name: Upload target content
        uses: actions/upload-artifact@v4
        with:
          name: target
          path: target

      - name: Push edge images
        if: "!startsWith(github.ref, 'refs/tags/')"
        shell: bash
        run: make push-edge

      # - name: Attest
      #   uses: actions/attest-build-provenance@v1
      #   with:
      #     subject-path: 'docker.io/floryn90/hugo'
      #     subject-name: 'floryn90/hugo'
      #     push-to-registry: true