tekton-task-images-conftest-publish.yaml

name: tekton-task-images-conftest-publish
on:
  push:
    paths:
      - tekton-task-images/conftest/VERSION
      - .github/workflows/tekton-task-images-conftest-publish.yaml
jobs:
  build:
    env:
      context: tekton-task-images/conftest
      image_name: tekton-task-conftest
      REGISTRY: ${{ secrets.REGISTRY_URI }}
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4

      - name: Convert VERSION to version.json
        run: |
          version=$(cat ${{ env.context }}/VERSION | cut -d"=" -f2)
          jq -c --null-input --arg version "v$version" '{ "version": $version }' > ${{ env.context }}/version.json

      - name: Get image tags
        id: image_tags
        uses: redhat-cop/github-actions/get-image-version@master
        with:
          IMAGE_CONTEXT_DIR: ${{ env.context }}

      - name: Build image
        id: build_image
        uses: redhat-actions/buildah-build@b4dc19b4ba891854660ab1f88a097d45aa158f76 # v2
        with:
          context: ${{ env.context }}
          dockerfiles: |
            ./${{ env.context }}/Dockerfile
          image: ${{ env.image_name }}
          tags: "${{ steps.image_tags.outputs.IMAGE_TAGS }}"

      - name: Push to ghcr.io
        uses: redhat-actions/push-to-registry@9986a6552bc4571882a4a67e016b17361412b4df # v2
        with:
          image: ${{ steps.build_image.outputs.image }}
          registry: ghcr.io/${{ github.repository }}
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}
          tags: ${{ steps.build_image.outputs.tags }}

      - name: Push to Quay
        if: ${{ env.REGISTRY }} != ""
        id: push_to_quay
        uses: redhat-actions/push-to-registry@9986a6552bc4571882a4a67e016b17361412b4df # v2
        with:
          image: ${{ steps.build_image.outputs.image }}
          registry: ${{ secrets.REGISTRY_URI }}/${{ secrets.REGISTRY_REPOSITORY }}
          username: ${{ secrets.REGISTRY_USERNAME }}
          password: ${{ secrets.REGISTRY_PASSWORD }}
          tags: ${{ steps.build_image.outputs.tags }}