master workflows (docker-push composite action)

Author: avbit

.github/actions/docker-push/action.yml

@@ -0,0 +1,67 @@
+# .github/actions/docker-push/action.yml
+name: "Docker Push Composite"
+description: "Build and push Docker image to any registry"
+runs:
+  using: "composite"
+  steps:
+    # Set up QEMU for multi-architecture builds
+    - name: Set up QEMU
+      uses: docker/setup-qemu-action@v3
+
+    # Set up Docker Buildx for multi-architecture build support
+    - name: Set up Docker Buildx
+      uses: docker/setup-buildx-action@v3
+
+    - name: Generate Docker Metadata
+      id: metadata
+      uses: docker/metadata-action@v5
+      with:
+        images: ${{ inputs.image }}
+        tags: |
+          type=ref,event=tag
+          type=ref,ref=branch
+          type=semver,pattern={{version}}
+          type=semver,pattern={{major}}.{{minor}}
+        flavor: latest=${{ inputs.latest }}
+
+    - name: Log in to Docker Registry
+      uses: docker/login-action@v3
+      with:
+        registry: ${{ inputs.registry }}
+        username: ${{ inputs.username }}
+        password: ${{ inputs.password }}
+
+    - name: Build and push Docker image
+      uses: docker/build-push-action@v5
+      with:
+        context: .
+        file: ${{ inputs.dockerfile }}
+        platforms: ${{ inputs.platforms }}
+        push: true
+        tags: ${{ steps.metadata.outputs.tags }}
+        labels: ${{ steps.metadata.outputs.labels }}
+
+inputs:
+  registry:
+    description: 'Docker registry URL'
+    required: true
+  image:
+    description: 'Image name'
+    required: true
+  username:
+    description: 'Registry username'
+    required: true
+  password:
+    description: 'Registry password'
+    required: true
+  dockerfile:
+    description: 'Path to Dockerfile'
+    required: true
+  platforms:
+    description: 'Platforms to build'
+    required: false
+    default: 'linux/amd64,linux/arm64'
+  latest:
+    description: 'Set latest tag'
+    required: false
+    default: true

.github/workflows/ci.yml

@@ -10,10 +10,6 @@ on:
     tags:
       - "*"
 
-permissions:
-  contents: read      # needed for checkout
-  packages: write     # needed to push to GHCR
-
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -28,78 +24,25 @@ jobs:
       # Checkout the repository
       - uses: actions/checkout@v4
 
-      # Set up QEMU for multi-architecture builds
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
-
-      # Set up Docker Buildx for multi-architecture build support
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
       # Registry 1. GitHub Container Registry (GHCR)
-      - name: Generate Docker Metadata
-        id: metadata
-        uses: docker/metadata-action@v5
-        with:
-          images: ghcr.io/${{ github.repository }}
-          tags: |
-            type=ref,event=tag
-            type=ref,ref=branch
-            type=semver,pattern={{version}}
-            type=semver,pattern={{major}}.{{minor}}
-          flavor: latest=true
-
-      - name: Log in to GHCR
-        uses: docker/login-action@v3
+      - name: Build and push to GHCR
+        uses: ./.github/actions/docker-push
         with:
           registry: ghcr.io
+          image: ghcr.io/${{ github.repository }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Build and push Docker image to GHCR
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          platforms: linux/amd64,linux/arm64   # multi-arch support
-          file: docker/Dockerfile
-          push: true
-          tags: ${{ steps.metadata.outputs.tags }}
-          labels: ${{ steps.metadata.outputs.labels }}
+          dockerfile: docker/Dockerfile
 
       # Registry 2. DockerHub (only if credentials are provided)
-      - name: Generate Docker Metadata
+      - name: Build and push to DockerHub
+        uses: ./.github/actions/docker-push
         if: ${{ env.DOCKER_USERNAME }}
         env:
           DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
-        id: metadata2
-        uses: docker/metadata-action@v5
-        with:
-          images: ${{ github.repository }}
-          tags: |
-            type=ref,event=tag
-            type=ref,ref=branch
-            type=semver,pattern={{version}}
-            type=semver,pattern={{major}}.{{minor}}
-          flavor: latest=true
-
-      - name: Log in to DockerHub
-        if: ${{ env.DOCKER_USERNAME }}
-        env:
-          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
-        uses: docker/login-action@v3
         with:
+          registry: docker.io
+          image: ${{ github.repository }}
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-
-      - name: Build and push Docker image to DockerHub
-        if: ${{ env.DOCKER_USERNAME }}
-        env:
-          DOCKER_USERNAME: ${{ secrets.DOCKER_USERNAME }}
-        uses: docker/build-push-action@v5
-        with:
-          context: .
-          platforms: linux/amd64,linux/arm64   # multi-arch support
-          file: docker/Dockerfile
-          push: true
-          tags: ${{ steps.metadata2.outputs.tags }}
-          labels: ${{ steps.metadata2.outputs.labels }}
+          dockerfile: docker/Dockerfile