publish-to-dockerhub.yaml

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.

# GitHub recommends pinning actions to a commit SHA.
# To get a newer version, you will need to update the SHA.
# You can also reference a tag or branch, but the action may change without warning.

name: Publish Docker Image(s)

on:
  release:
    types: [published]
  push:
    branches:
      - master
    tags:
      - v*
  pull_request:
    branches:
      - master
    paths-ignore:
      - docs/**
      - tests/**
      - dockerfiles/**
      - scripts/**
      - LICENSE
      - README.md
      - CONTRIBUTING.md
      - CODE_OF_CONDUCT.md
      - SECURITY.md
      - CHANGELOG.md
      - PULL_REQUEST_TEMPLATE.md
      - ISSUE_TEMPLATE.md
      - CODEOWNERS
      - .github/**
      - '!.github/workflows/publish-docker-image.yml'
  workflow_dispatch:
    # NOTE: user specifies branch/tag via workflow_dispatch in the UI
    inputs:
      tag:
        description: Docker tag to use
        required: false
        type: string
        default: latest

jobs:
  push_to_registry:
    name: Push Docker image to Docker Hub
    runs-on: ubuntu-latest
    permissions:
      packages: write
      contents: read
    steps:
      - name: Check out the repo
        uses: actions/checkout@v4

      - name: Log in to Docker Hub
        uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Log in to the Container registry
        uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta
        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
        with:
          images: |
            ${{ secrets.DOCKER_USERNAME }}/phaseshifts
            ghcr.io/${{ github.repository }}
          # yamllint: disable rule:line-length
          tags: |
            type=raw,value=${{ github.event.inputs.tag != '' && github.event.inputs.tag || (github.event_name == 'release' && 'latest' || 'dev') }},enabled=${{ github.event.inputs.tag != '' || github.event_name == 'release' && 'true' || 'false' }}
            type=ref,event=pr,enabled=${{ github.event_name == 'pull_request' && 'true' || 'false' }}
            type=semver,pattern={{version}},enabled=${{ (github.event_name == 'release' || github.ref_type == 'tag') && 'true' || 'false' }}
            type=semver,pattern={{major}}.{{minor}},enabled=${{ github.event_name == 'push' && github.ref_type == 'tag' && 'true' || 'false' }}
            type=sha
          # yamllint: enable rule:line-length

      - name: Build and push Docker image
        uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
        with:
          context: .
          file: ./dockerfiles/phaseshifts-phsh.dockerfile
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}