build.yml

name: build

on:
  workflow_call:
    inputs:
      registry:
        required: true
        type: string
      image_name:
        required: true
        type: string
      image_tag:
        required: true
        type: string
      dockerfile:
        required: true
        type: string
      context:
        required: true
        type: string
      docker_target:
        required: false
        type: string
      environment:
        required: false
        type: string
    outputs:
      image_tag:
        description: Full image tag that was built and pushed
        value: ${{ jobs.build.outputs.image_tag }}

jobs:
  build:
    name: build_and_push_image
    runs-on: ubuntu-latest
    environment: ${{ inputs.environment }}
    permissions:
      contents: read
      packages: write
    outputs:
      image_tag: ${{ steps.vars.outputs.image_tag }}
    steps:
      - name: checkout
        uses: actions/checkout@v5

      - name: login_to_ghcr
        uses: docker/login-action@v4
        with:
          registry: ${{ inputs.registry }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: resolve_image_tag
        id: vars
        env:
          REGISTRY: ${{ inputs.registry }}
          REPOSITORY: ${{ github.repository }}
          IMAGE_NAME: ${{ inputs.image_name }}
          IMAGE_TAG: ${{ inputs.image_tag }}
        run: |
          echo "image_tag=$REGISTRY/$REPOSITORY/$IMAGE_NAME:$IMAGE_TAG" >> "$GITHUB_OUTPUT"

      - name: setup_qemu
        uses: docker/setup-qemu-action@v4

      - name: setup_docker_buildx
        uses: docker/setup-buildx-action@v4

      - name: build_and_push
        uses: docker/build-push-action@v7
        with:
          context: ${{ inputs.context }}
          file: ${{ inputs.dockerfile }}
          target: ${{ inputs.docker_target }}
          platforms: linux/amd64
          push: true
          tags: ${{ steps.vars.outputs.image_tag }}
          cache-from: type=gha
          cache-to: type=gha,mode=max