docker-output-publish.yml

name: Docker output publish

on:
  workflow_call:
    inputs:
      artifact-name:
        description: "Name of artifact to get"
        required: true
        type: string
      build-args:
        description: "Docker build args"
        required: false
        type: string
      docker-image:
        description: "Name of the docker image to push"
        required: true
        type: string
      docker-tag:
        description: "Tag of the docker image to push, defaults to current branch name"
        required: false
        type: string
        default: ""
      docker-platforms:
        description: "List of comma separated platforms to build"
        required: false
        type: string
        default: "linux/amd64"
      runs-on:
        description: "Runner to use"
        required: false
        type: string
        default: "ubuntu-latest"
    secrets:
      docker-repo:
        description: "Docker registry to push to"
        required: true
      docker-username:
        description: "Docker username"
        required: true
      docker-token:
        description: "Docker token"
        required: true
    outputs:
      image-digest:
        description: "Pushed docker image's digest"
        value: ${{ jobs.publish.outputs.digest }}

jobs:
  publish:
    name: Docker - Publish
    runs-on: ["ubuntu-latest", "${{ inputs.runs-on }}"]
    concurrency: docker-${{ inputs.docker-tag }}
    outputs:
      digest: ${{ steps.docker_build.outputs.digest }}
    steps:
      - name: Checkout source
        uses: actions/checkout@v4.2.2
      - uses: actions/download-artifact@v4.1.8
        name: Download artifact
        with:
          name: ${{ inputs.artifact-name }}
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3.2.0
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3.7.1
      - name: Login on registry
        uses: docker/login-action@v3.3.0
        with:
          registry: ${{ secrets.docker-repo }}
          username: ${{ secrets.docker-username }}
          password: ${{ secrets.docker-token }}
      - name: Calculate image tag
        id: image-tag
        run: |
          if [ -z "${{ inputs.docker-tag }}" ]; then
            echo "tag=${GITHUB_REF##*/}" >> "$GITHUB_OUTPUT"
          else
            echo "tag=${{ inputs.docker-tag }}" >> "$GITHUB_OUTPUT"
          fi
      - name: Build and push
        id: docker_build
        uses: docker/build-push-action@v6.9.0
        with:
          context: .
          push: true
          tags: |
            ${{ secrets.docker-repo }}/${{ inputs.docker-image }}:${{ steps.image-tag.outputs.tag }}
          platforms: ${{ inputs.docker-platforms }}
          build-args: |
            BUILDX_QEMU_ENV=true
            ${{ inputs.build-args }}
          cache-from: type=gha
          cache-to: type=gha,mode=max
      - name: Image digest
        run: echo ${{ steps.docker_build.outputs.digest }}