push-workflow.yaml

name: Push workflow
on: push
jobs:
  # All PR jobs should be listed in required_status_checks https://github.com/rcwbr/release-it-docker/blob/0e9a5bcd8da40cac01686b6312df09bffdee810e/.github/settings.yml#L54
  build-docker-images:
    name: Build Docker images
    runs-on: ubuntu-24.04
    permissions:
      packages: write
    steps:
      - name: Checkout
        uses: actions/checkout@v4.1.7
      - name: GHCR Login
        uses: docker/login-action@v3.3.0
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      -
        name: Docker Buildx builder setup
        uses: docker/setup-buildx-action@v3.6.1
      -
        id: docker-bake-base
        name: Docker Bake base
        uses: docker/bake-action@v5.7.0
        with:
          workdir: base
          source: https://github.com/rcwbr/dockerfile-partials.git#main
          files: github-cache-bake.hcl
          set: |
            default.context=cwd://
        env:
          REGISTRY: ghcr.io/rcwbr/
          IMAGE_NAME: release-it-docker
      -
        id: docker-bake-conventional-changelog
        name: Docker Bake conventional-changelog
        uses: docker/bake-action@v5.7.0
        with:
          workdir: conventional-changelog
          source: https://github.com/rcwbr/dockerfile-partials.git#main
          files: github-cache-bake.hcl, cwd://docker-bake.hcl
          set: |
            default.context=cwd://
        env:
          REGISTRY: ghcr.io/rcwbr/
          IMAGE_NAME: release-it-docker-conventional-changelog
    outputs:
      docker-bake-base-metadata: ${{ steps.docker-bake-base.outputs.metadata }}
      docker-bake-conventional-changelog-metadata: ${{ steps.docker-bake-conventional-changelog.outputs.metadata }}
  test:
    name: Test
    needs: build-docker-images
    runs-on: ubuntu-24.04
    steps:
      -
        name: env
        env:
          BUILD_IMAGE_OUTPUT_RAW: ${{ needs.build-docker-images.outputs.docker-bake-conventional-changelog-metadata }}
          BUILD_IMAGE_OUTPUT: ${{ toJSON(fromJSON(needs.build-docker-images.outputs.docker-bake-conventional-changelog-metadata)) }}
        run: |
          env
  # release-it-workflow:
  #   name: Release-it workflow
  #   uses: rcwbr/release-it-gh-workflow/.github/workflows/release-it-workflow.yaml@0.1.0
  #   needs: build-docker-images
  #   with:
  #     # release-it-image: "ghcr.io/rcwbr/release-it-docker-conventional-changelog:${{ (github.ref_protected == true || github.ref_type == 'tag') && github.ref_name }}"
  #     app-id: 1033419 # release-it-docker CI release-it app
  #     app-environment: Repo release
  #   secrets:
  #     app-secret: ${{ secrets.RELEASE_IT_GITHUB_APP_KEY }} # Secret belonging to the Repo release environment