Skip to content

Merge pull request #6602 from simonpasquier/cut-0.74.0 #1292

Merge pull request #6602 from simonpasquier/cut-0.74.0

Merge pull request #6602 from simonpasquier/cut-0.74.0 #1292

Workflow file for this run

name: publish
on:
workflow_dispatch:
push:
branches:
- 'release-*'
- 'master'
- 'main'
tags:
- 'v*'
- '!pkg*'
jobs:
publish:
name: Publish container images
permissions:
id-token: write # needed to sign images with cosign.
packages: write # needed to push images to ghcr.io.
runs-on: ubuntu-latest
steps:
- name: Checkout
uses: actions/checkout@v4
- name: Import environment variables from file
run: cat ".github/env" >> $GITHUB_ENV
- name: Install Go
uses: actions/setup-go@v5
with:
go-version: '${{ env.golang-version }}'
check-latest: true
- name: Install cosign
uses: sigstore/cosign-installer@main
- name: Check the Docker version
run: docker version
- name: Check the cosign version
run: cosign version
- name: Install crane
uses: imjasonh/setup-crane@v0.3
- name: Login to quay.io
uses: docker/login-action@v3
with:
registry: quay.io
username: ${{ secrets.quay_username }}
password: ${{ secrets.quay_password }}
- name: Login to ghcr.io
uses: docker/login-action@v3
with:
registry: ghcr.io
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Cosign login
run: |
echo "${{ secrets.GITHUB_TOKEN }}" | cosign login -u ${{ github.repository_owner }} --password-stdin ghcr.io
echo "${{ secrets.quay_password }}" | cosign login -u ${{ secrets.quay_username }} --password-stdin quay.io
- name: Build images and push
run: ./scripts/push-docker-image.sh