tag.yml

---
name: Build and push Docker Image on Tag

on:
  push:
    tags:
      - '[0-9]*'

jobs:
  build_and_push:
    runs-on: ubuntu-latest
    permissions:
        contents: read
        packages: write
    strategy:
      matrix:
        tenants: [default, brb, n21, thr ]
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Docker meta Service Name for docker hub
        id: docker_meta_img_hub
        uses: docker/metadata-action@v5
        with:
          images: docker.io/schulcloud/schulcloud-client-${{ matrix.tenants }}, quay.io/schulcloudverbund/schulcloud-client-${{ matrix.tenants }}
          tags: |
            type=semver,pattern={{version}}
            type=semver,pattern={{major}}.{{minor}}

      - name: Log into docker registry
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_TOKEN }}

      - name: Log into quay registry
        uses: docker/login-action@v3
        with:
            registry: quay.io
            username: ${{ secrets.QUAY_USERNAME }}
            password: ${{ secrets.QUAY_TOKEN }}

      - name: Build and push ${{ github.repository }}
        uses: docker/build-push-action@v6
        env:
          DOCKER_BUILD_RECORD_UPLOAD: false
        with:
          build-args: |
            SC_THEME_BUILD=${{ matrix.tenants }}
          context: .
          file: ./Dockerfile
          platforms: linux/amd64
          push: true
          pull: true
          tags: ${{ steps.docker_meta_img_hub.outputs.tags }}
          labels: ${{ steps.docker_meta_img_hub.outputs.labels }}


  create_release:
      runs-on: ubuntu-latest
      permissions:
          contents: write
      steps:
          - name: generate sbom via dependency-graph
            run: gh api repos/${{ github.repository }}/dependency-graph/sbom > dependencies.sbom.json
            env:
                GH_TOKEN: ${{ github.token }}
          - name: create release
            uses: softprops/action-gh-release@v2
            with:
                files: dependencies.sbom.json