Skip to content

Merge pull request #907 from SgtCoDFish/bump-trust #4

Merge pull request #907 from SgtCoDFish/bump-trust

Merge pull request #907 from SgtCoDFish/bump-trust #4

name: trust-package-release-debian-bookworm
on:
push:
branches: ['main']
paths:
- make/00_debian_bookworm_version.mk
jobs:
build_and_push:
runs-on: ubuntu-latest
permissions:
contents: read # needed for checkout
packages: write # needed for push images
id-token: write # needed for keyless signing
steps:
- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
# Adding `fetch-depth: 0` makes sure tags are also fetched. We need
# the tags so `git describe` returns a valid version.
# see https://github.com/actions/checkout/issues/701 for extra info about this option
with: { fetch-depth: 0 }
- id: go-version
run: |
make print-go-version >> "$GITHUB_OUTPUT"
- uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0
with:
registry: quay.io
username: ${{ secrets.QUAY_USERNAME }}
password: ${{ secrets.QUAY_PASSWORD }}
- uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
with:
go-version: ${{ steps.go-version.outputs.result }}
- id: release
run: make release-debian-bookworm-trust-package
outputs:
RELEASE_OCI_MANAGER_IMAGE: ${{ steps.release.outputs.RELEASE_OCI_PACKAGE_DEBIAN_BOOKWORM_IMAGE }}
RELEASE_OCI_MANAGER_TAG: ${{ steps.release.outputs.RELEASE_OCI_PACKAGE_DEBIAN_BOOKWORM_TAG }}