build.yml

name: Build

on:
  push:
    branches: ["main"]
    tags: ["v*"]
  pull_request:
    branches: ["main"]
  merge_group:
    branches: ["main"]

permissions:
  contents: read
  packages: write

jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
      - uses: bazelbuild/setup-bazelisk@v3
      - name: Configure bazel
        run: |
          echo "${{ secrets.BUILDBUDDY_BAZELRC }}" > .bazelrc.user &&
            echo "build --compilation_mode=opt" >> .bazelrc.user
      - name: Setup Steiger
        run: |
          curl -Lo steiger https://github.com/brainhivenl/steiger/releases/download/v0.0.1/steiger-x86_64-unknown-linux-gnu &&
            sudo install steiger /usr/local/bin/ &&
            rm steiger
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Build and push
        run: steiger build --repo ghcr.io/brainpodnl/distroless-php