image.yml

name: Image

on:
  workflow_call:
  release:
    types: [published]

env:
  REGISTRY: ghcr.io
  IMAGE: ghcr.io/${{ github.repository_owner }}/osa

jobs:
  build:
    name: Build & Push
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v6

      - uses: docker/setup-buildx-action@v4

      - uses: docker/login-action@v4
        with:
          registry: ${{ env.REGISTRY }}
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Compute tags
        id: tags
        run: |
          SHA_SHORT=$(echo "${{ github.sha }}" | cut -c1-7)
          TAGS="${{ env.IMAGE }}:sha-${SHA_SHORT}"
          if [[ "${{ github.event_name }}" == "release" ]]; then
            TAGS="${TAGS},${{ env.IMAGE }}:${{ github.event.release.tag_name }}"
          fi
          if [[ -n "${{ github.event.pull_request.number }}" ]]; then
            TAGS="${TAGS},${{ env.IMAGE }}:pr-${{ github.event.pull_request.number }}"
          fi
          echo "tags=${TAGS}" >> "$GITHUB_OUTPUT"

      - uses: docker/build-push-action@v7
        with:
          context: server
          push: true
          tags: ${{ steps.tags.outputs.tags }}
          cache-from: type=gha
          cache-to: type=gha,mode=max
          build-args: |
            OSA_VERSION=${{ github.event.release.tag_name || github.sha }}
            OSA_REVISION=${{ github.sha }}