Files
tiennm99 4ef74f3317 feat(scribe): expand OCI image-spec labels
Add image.title and image.licenses; override metadata-action defaults
in publish workflow so published image carries Scribe upstream source
and correct title rather than this repo's auto-derived values.
2026-05-28 12:33:42 +07:00

70 lines
2.2 KiB
YAML

name: Publish Docker image
on:
push:
branches:
- 'main'
paths:
- 'scribe-2.2/**'
- '.github/workflows/publish-scribe-2.2.yml'
workflow_dispatch:
jobs:
push_to_registries:
name: Push Docker image to multiple registries
runs-on: ubuntu-latest
permissions:
packages: write
contents: read
attestations: write
id-token: write
steps:
- name: Check out the repo
uses: actions/checkout@v5
- name: Log in to Docker Hub
uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a
with:
username: ${{ secrets.DOCKER_USERNAME }}
password: ${{ secrets.DOCKER_PASSWORD }}
- name: Log in to the Container registry
uses: docker/login-action@65b78e6e13532edd9afa3aa52ac7964289d1a9c1
with:
registry: ghcr.io
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Extract metadata (tags, labels) for Docker
id: meta
uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
with:
images: |
ghcr.io/${{ github.actor }}/scribe
${{ secrets.DOCKER_USERNAME }}/scribe
tags: |
type=raw,value=latest
type=raw,value=2.2
labels: |
org.opencontainers.image.title=Facebook Legacy Scribe
org.opencontainers.image.description=Facebook Legacy Scribe - real-time log aggregation daemon
org.opencontainers.image.version=2.2
org.opencontainers.image.source=https://github.com/facebookarchive/scribe
org.opencontainers.image.licenses=Apache-2.0
- name: Build and push Docker images
id: push
uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
with:
context: scribe-2.2
push: true
tags: ${{ steps.meta.outputs.tags }}
labels: ${{ steps.meta.outputs.labels }}
- name: Generate artifact attestation
uses: actions/attest-build-provenance@v3
with:
subject-name: ghcr.io/${{ github.actor }}/scribe
subject-digest: ${{ steps.push.outputs.digest }}
push-to-registry: true