build-security.yml 1.9 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162
  1. name: Build security nightly container image
  2. permissions:
  3. contents: read
  4. packages: write
  5. jobs:
  6. compute-suffix:
  7. runs-on: ubuntu-latest
  8. if: github.repository == 'mastodon/mastodon'
  9. steps:
  10. - id: version_vars
  11. env:
  12. TZ: Etc/UTC
  13. run: |
  14. echo mastodon_version_prerelease=nightly.$(date --date='next day' +'%Y-%m-%d')-security>> $GITHUB_OUTPUT
  15. outputs:
  16. prerelease: ${{ steps.version_vars.outputs.mastodon_version_prerelease }}
  17. build-image:
  18. needs: compute-suffix
  19. uses: ./.github/workflows/build-container-image.yml
  20. with:
  21. file_to_build: Dockerfile
  22. platforms: linux/amd64,linux/arm64
  23. use_native_arm64_builder: true
  24. cache: false
  25. push_to_images: |
  26. tootsuite/mastodon
  27. ghcr.io/mastodon/mastodon
  28. version_prerelease: ${{ needs.compute-suffix.outputs.prerelease }}
  29. labels: |
  30. org.opencontainers.image.description=Nightly build image used for testing purposes
  31. flavor: |
  32. latest=auto
  33. tags: |
  34. type=raw,value=edge
  35. type=raw,value=nightly
  36. type=schedule,pattern=${{ needs.compute-suffix.outputs.prerelease }}
  37. secrets: inherit
  38. build-image-streaming:
  39. needs: compute-suffix
  40. uses: ./.github/workflows/build-container-image.yml
  41. with:
  42. file_to_build: streaming/Dockerfile
  43. platforms: linux/amd64,linux/arm64
  44. use_native_arm64_builder: true
  45. cache: false
  46. push_to_images: |
  47. tootsuite/mastodon-streaming
  48. ghcr.io/mastodon/mastodon-streaming
  49. version_prerelease: ${{ needs.compute-suffix.outputs.prerelease }}
  50. labels: |
  51. org.opencontainers.image.description=Nightly build image used for testing purposes
  52. flavor: |
  53. latest=auto
  54. tags: |
  55. type=raw,value=edge
  56. type=raw,value=nightly
  57. type=schedule,pattern=${{ needs.compute-suffix.outputs.prerelease }}
  58. secrets: inherit