Add docker images

Author: n-e

.github/dependabot.yml

@@ -23,4 +23,10 @@ updates:
         update-types:
           - minor
           - patch
-        dependency-type: production
+        dependency-type: production
+
+  - package-ecosystem: "docker"
+    directory: "/"
+    labels: []
+    schedule:
+      interval: "weekly"

.github/workflows/dock.yml

@@ -0,0 +1,49 @@
+on:
+  push:
+
+jobs:
+  build:
+    name: Build & Push Docker Image
+    runs-on: ubuntu-latest
+
+    permissions:
+      contents: read
+      packages: write
+
+    steps:
+      - uses: docker/setup-buildx-action@v4
+
+      - uses: docker/login-action@v4
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - uses: actions/checkout@v6
+
+      - id: version
+        run: |
+          TAG=v0.1.2
+          echo "tag=$TAG" >> "$GITHUB_OUTPUT"
+          echo "version=$(echo -n "$TAG" | cut -c '2-')" >> "$GITHUB_OUTPUT"
+
+      - uses: docker/build-push-action@v7
+        with:
+          tags: ghcr.io/n-e/actions-oidc-trigger:${{ steps.version.outputs.version }}-slim
+          push: false
+          target: slim
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          build-args: |
+            TAG=${{ steps.version.outputs.tag }}
+  
+      - uses: docker/build-push-action@v7
+        with:
+          tags: ghcr.io/n-e/actions-oidc-trigger:${{ steps.version.outputs.version }}-docker-cli
+          push: false
+          target: docker-cli
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+          build-args: |
+            TAG=${{ steps.version.outputs.tag }}
+  

Dockerfile

@@ -0,0 +1,33 @@
+FROM node:24.14.0-trixie-slim AS base
+
+ARG TAG
+
+RUN npm i -g actions-oidc-trigger@$(echo -n "$TAG" | cut -c '2-')
+
+
+FROM base AS slim
+
+RUN groupadd app && useradd app -g app -m
+
+USER app
+
+CMD [ "actions-oidc-trigger" ]
+
+FROM base AS docker-cli
+
+# In this image we don't switch to the app user as we need to be root to access the docker socket
+
+COPY docker/add-docker-to-apt.sh ./
+
+RUN ./add-docker-to-apt.sh && rm add-docker-to-apt.sh
+
+# apt list --all-versions docker-ce
+ARG VERSION_STRING=5:29.2.1-1~debian.13~trixie
+
+RUN apt update \
+    && apt install -y \
+    docker-ce-cli=$VERSION_STRING \
+    git \
+    && rm -rf /var/lib/apt/lists/*
+
+CMD [ "actions-oidc-trigger" ]

docker/add-docker-to-apt.sh

@@ -0,0 +1,22 @@
+#!/bin/bash
+# from https://docs.docker.com/engine/install/debian/
+
+set -e
+
+# Add Docker's official GPG key:
+apt update
+apt install -y ca-certificates curl
+install -m 0755 -d /etc/apt/keyrings
+curl -fsSL https://download.docker.com/linux/debian/gpg -o /etc/apt/keyrings/docker.asc
+chmod a+r /etc/apt/keyrings/docker.asc
+
+# Add the repository to Apt sources:
+tee /etc/apt/sources.list.d/docker.sources <<EOF
+Types: deb
+URIs: https://download.docker.com/linux/debian
+Suites: $(. /etc/os-release && echo "$VERSION_CODENAME")
+Components: stable
+Signed-By: /etc/apt/keyrings/docker.asc
+EOF
+
+apt update