docker.yml

# This workflow will build a Java project with Gradle, create repository tag, and push a new docker image to docker hub
name: Create Tag and Push Image to DockerHub

on:
  push:
    branches: [ master ]
    paths-ignore:
      - 'metrics/**'
      - '**/*.md'
      - '*.md'

jobs:
  build-and-push:
    runs-on: ubuntu-latest
    env:
      APP_IMAGE: sasanlabs/owasp-vulnerableapp
      BASE_IMAGE: sasanlabs/owasp-vulnerableapp-base
    steps:
      - name: Checkout new changes
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Login to DockerHub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Setup GitVersion action
        uses: gittools/actions/gitversion/setup@v0.9.7
        with:
          versionSpec: '5.x'

      - name: Execute GitVersion action
        id: gitversion
        uses: gittools/actions/gitversion/execute@v0.9.7

      - name: Create tag for GitHub
        uses: tvdias/github-tagger@v0.0.1
        with:
          repo-token: "${{ secrets.GITHUB_TOKEN }}"
          tag: '${{ steps.gitversion.outputs.semver }}'

      - name: Grant execute permission for gradlew
        run: chmod +x gradlew

      - name: Build and push base image
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./Dockerfile.base
          platforms: linux/amd64,linux/arm64
          push: true
          tags: |
            ${{ env.BASE_IMAGE }}:${{ steps.gitversion.outputs.semver }}
            ${{ env.BASE_IMAGE }}:latest

      - name: Build with Gradle and push app image
        run: |
          ./gradlew jib \
            -Djib.to.image=${APP_IMAGE}:unreleased \
            -Djib.to.tags=${{ steps.gitversion.outputs.semver }},latest