From 9d55b968c5a43d8ed1ae410ed73dffb710824d41 Mon Sep 17 00:00:00 2001
From: adamus1red <adamus1red@users.noreply.github.com>
Date: Wed, 25 Sep 2024 23:39:02 +0100
Subject: [PATCH 1/2] Add GHA for building container release (#1)

* Add GHA for building container release

* tweak tags for docker builds

* test some provenance changes
---
 .github/workflows/docker-build.yml | 78 ++++++++++++++++++++++++++++++
 1 file changed, 78 insertions(+)
 create mode 100644 .github/workflows/docker-build.yml

diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
new file mode 100644
index 0000000..271c26a
--- /dev/null
+++ b/.github/workflows/docker-build.yml
@@ -0,0 +1,78 @@
+name: Docker Image CI
+
+on:
+    push:
+        branches: [ "main" ]
+    pull_request:
+        branches: [ "main" ]
+    workflow_dispatch:
+
+jobs:
+
+  build:
+
+    runs-on: ubuntu-latest
+
+    strategy:
+      fail-fast: true
+
+    permissions:
+        id-token: write
+        packages: write
+        contents: read
+        attestations: write
+
+    steps:
+    - 
+        name: checkout
+        uses: actions/checkout@v4
+
+    - 
+        name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+    
+    - 
+        name: Set up Docker Buildx
+        id: buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+            install: true
+
+    - 
+        name: Docker metadata
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+            images: |
+                ghcr.io/${{ github.repository_owner }}/imdb-to-overseerr
+            tags: |
+                type=semver,pattern={{major}}
+                type=semver,pattern={{major}}.{{minor}}
+                type=semver,pattern={{version}}
+
+                type=edge,branch=main
+                type=ref,event=branch
+                type=ref,event=pr
+    -
+        name: Login to GitHub Container Registry
+        uses: docker/login-action@v3
+        if: github.event_name != 'pull_request'
+        with:
+            registry: ghcr.io
+            username: ${{ github.actor }}
+            password: ${{ secrets.GITHUB_TOKEN }}
+
+    -
+        name: Build container
+        id: push
+        uses: docker/build-push-action@v5
+        with:
+            context: .
+            file: ./Dockerfile
+            # platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/arm/v6,linux/s390x
+            platforms: linux/amd64,linux/arm64
+            push: ${{ github.event_name != 'pull_request' }}
+            tags: ${{ steps.meta.outputs.tags }}
+            labels: ${{ steps.meta.outputs.labels }}
+            provenance: mode=max
+            sbom: true
\ No newline at end of file

From baa1047ed0c1b81a1a32382744625de5a8009345 Mon Sep 17 00:00:00 2001
From: adamus1red <adamus1red@users.noreply.github.com>
Date: Wed, 25 Sep 2024 23:41:32 +0100
Subject: [PATCH 2/2] trigger build on tags

---
 .github/workflows/docker-build.yml | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
index 271c26a..50794f6 100644
--- a/.github/workflows/docker-build.yml
+++ b/.github/workflows/docker-build.yml
@@ -3,6 +3,8 @@ name: Docker Image CI
 on:
     push:
         branches: [ "main" ]
+        tags:
+        - 'v*'
     pull_request:
         branches: [ "main" ]
     workflow_dispatch: