Docker Image Build/Publish source image workflow (vtuber-plan/olah)

name: Docker Image Build/Publish source image
 
on:
  push:
    branches:
      - dev
    paths:
      - src/**
      - pyproject.toml
      - requirements.txt
      - docker/build@source/dockerfile
      - .github/workflows/docker-image-tag-commit.yml
  workflow_dispatch:
    inputs:
      git_ref:
        description: Git ref to build from, such as dev or a commit SHA
        required: true
        default: dev
 
permissions:
  contents: read
  packages: write
 
concurrency:
  group: docker-source-${{ github.event_name }}-${{ github.ref_name || github.event.inputs.git_ref }}
  cancel-in-progress: true
 
jobs:
  build-and-push-docker-image:
    timeout-minutes: 30
    name: Build source Docker image and push to registries
    runs-on: latchkey-small
 
    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          ref: ${{ github.event.inputs.git_ref || github.ref_name }}
 
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
 
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
 
      - name: Login to Docker Hub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}
 
      - name: Login to GitHub Container Registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.repository_owner }}
          password: ${{ secrets.GITHUB_TOKEN }}
 
      - name: Compute image tags
        env:
          DOCKERHUB_IMAGE: ${{ secrets.DOCKERHUB_USERNAME }}/olah
          GHCR_IMAGE: ghcr.io/${{ github.repository_owner }}/olah
        run: |
          SHORT_SHA="$(git rev-parse --short HEAD)"
          TAGS="${DOCKERHUB_IMAGE}:sha-${SHORT_SHA}"$'\n'"${GHCR_IMAGE}:sha-${SHORT_SHA}"
          if [[ "${{ github.event_name }}" == "push" ]]; then
            TAGS="${TAGS}"$'\n'"${DOCKERHUB_IMAGE}:dev"$'\n'"${GHCR_IMAGE}:dev"
          fi
          {
            echo "IMAGE_TAGS<<EOF"
            echo "${TAGS}"
            echo "EOF"
          } >> "$GITHUB_ENV"
 
      - name: Build push image
        id: build
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ./docker/build@source/dockerfile
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ env.IMAGE_TAGS }}
 
      - name: Print image digest
        run: echo "${{ steps.build.outputs.digest }}"