radicale-docker/.github/workflows/build-tag.yml

name: Build and Publish tag version

on:
  push:
    tags: [ '*.*.*.*' ]

env:
  IMAGE_NAME: ${{ github.repository }}
  IMAGE_NAME_WITH_INFCLOUD: parrazam/radicale-with-infcloud
  PLATFORMS: linux/amd64,linux/arm64
  GH_REPO: ghcr.io

jobs:

  build-and-push-docker-image:
    name: Build Docker image and push to repositories
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
      id-token: write

    steps:
      - name: Checkout code
        uses: actions/checkout@v4

      - name: Install cosign
        uses: sigstore/cosign-installer@main

      - name: Set up QEMU
        id: qemu
        uses: docker/setup-qemu-action@v3
        with:
          image: tonistiigi/binfmt:latest
          platforms: ${{ env.PLATFORMS }}

      - name: Set up Docker Buildx
        id: buildx
        uses: docker/setup-buildx-action@v3
        
      - name: Log into ${{ env.GH_REPO }} registry
        uses: docker/login-action@v3
        with:
          registry: ${{ env.GH_REPO }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Login to DockerHub registry
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Extract Docker metadata
        id: meta
        uses: docker/metadata-action@v5
        with:
          images: |
            ${{ env.IMAGE_NAME }}
            ${{ env.IMAGE_NAME_WITH_INFCLOUD }}
            ${{ env.GH_REPO }}/${{ env.IMAGE_NAME }}            
          tags: |
            type=match,pattern=\d.\d.\d.\d            
          labels: |
            maintainer=parrazam
            org.opencontainers.image.title=Radicale with InfCloud
            org.opencontainers.image.description=Radicale with InfCloud interface included
            org.opencontainers.image.vendor=ParraSoft            

      - name: Build image and push to Docker Hub and GitHub Container Registry
        id: build-and-push
        uses: docker/build-push-action@v6
        with:
          context: .
          build-args: VERSION=${{ github.ref_name }}
          platforms: ${{ env.PLATFORMS }}
          push: true
          tags: ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}