release.yml

name: Build and publish the docker image

# `contents: read` to check out the code, `packages: write` so GITHUB_TOKEN
# can push to ghcr.io/<owner>/<repo> without any extra secrets.
permissions:
  contents: read
  packages: write

on:
  workflow_dispatch:
  push:
    tags:
      - "v2"

jobs:
    build-and-publish-action:
        name: Build and publish the docker image
        runs-on: ubuntu-latest
        steps:
            - name: Checkout repository
              uses: actions/checkout@v6
            # https://github.com/docker/setup-qemu-action
            - name: Set up QEMU
              uses: docker/setup-qemu-action@v3
            # https://github.com/docker/setup-buildx-action
            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@v3
            - name: Login to GitHub Container Registry
              uses: docker/login-action@v3
              with:
                  registry: ghcr.io
                  username: ${{ github.actor }}
                  password: ${{ secrets.GITHUB_TOKEN }}
            - name: Build action image
              run: make docker-build
              env:
                PLATFORM: linux/amd64
                ACTION: push
                PROGRESS_MODE: plain
                IMAGE_TAG: ghcr.io/${{ github.repository }}