Add README, DOCKERHUB overview, and prerelease -test tag support
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
+23
-11
@@ -2,7 +2,7 @@ name: Build and Push .NET Images
|
||||
|
||||
on:
|
||||
release:
|
||||
types: [published]
|
||||
types: [published, prereleased]
|
||||
workflow_dispatch:
|
||||
schedule:
|
||||
# Weekly rebuild for CVE patches (Sunday 6am UTC)
|
||||
@@ -24,7 +24,18 @@ jobs:
|
||||
matrix: ${{ steps.discover.outputs.matrix }}
|
||||
lts_major: ${{ steps.discover.outputs.lts_major }}
|
||||
sts_major: ${{ steps.discover.outputs.sts_major }}
|
||||
tag_suffix: ${{ steps.suffix.outputs.tag_suffix }}
|
||||
steps:
|
||||
- name: Determine tag suffix
|
||||
id: suffix
|
||||
run: |
|
||||
if [[ "${{ github.event.release.prerelease }}" == "true" ]]; then
|
||||
echo "tag_suffix=-test" >> $GITHUB_OUTPUT
|
||||
echo "Prerelease detected — tags will use -test suffix"
|
||||
else
|
||||
echo "tag_suffix=" >> $GITHUB_OUTPUT
|
||||
fi
|
||||
|
||||
- name: Discover supported .NET versions
|
||||
id: discover
|
||||
run: |
|
||||
@@ -64,6 +75,7 @@ jobs:
|
||||
env:
|
||||
LTS_MAJOR: ${{ needs.discover.outputs.lts_major }}
|
||||
STS_MAJOR: ${{ needs.discover.outputs.sts_major }}
|
||||
TAG_SUFFIX: ${{ needs.discover.outputs.tag_suffix }}
|
||||
steps:
|
||||
- name: Checkout code
|
||||
uses: actions/checkout@v4
|
||||
@@ -152,12 +164,12 @@ jobs:
|
||||
cp dockerfiles/runtime.Dockerfile context-runtime/Dockerfile
|
||||
|
||||
# Determine tags
|
||||
TAGS="-t $DOCKER_IMAGE:${VARIANT}-${MAJOR} -t $DOCKER_IMAGE:${VARIANT}-${VERSION}"
|
||||
TAGS="-t $DOCKER_IMAGE:${VARIANT}-${MAJOR}${TAG_SUFFIX} -t $DOCKER_IMAGE:${VARIANT}-${VERSION}${TAG_SUFFIX}"
|
||||
if [ "$MAJOR" = "$LTS_MAJOR" ]; then
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-lts"
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-lts${TAG_SUFFIX}"
|
||||
fi
|
||||
if [ "$MAJOR" = "$STS_MAJOR" ]; then
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-sts"
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-sts${TAG_SUFFIX}"
|
||||
fi
|
||||
|
||||
echo "Building $VARIANT with tags: $TAGS"
|
||||
@@ -184,12 +196,12 @@ jobs:
|
||||
done
|
||||
cp dockerfiles/runtime-invariant.Dockerfile context-runtime-invariant/Dockerfile
|
||||
|
||||
TAGS="-t $DOCKER_IMAGE:${VARIANT}-${MAJOR} -t $DOCKER_IMAGE:${VARIANT}-${VERSION}"
|
||||
TAGS="-t $DOCKER_IMAGE:${VARIANT}-${MAJOR}${TAG_SUFFIX} -t $DOCKER_IMAGE:${VARIANT}-${VERSION}${TAG_SUFFIX}"
|
||||
if [ "$MAJOR" = "$LTS_MAJOR" ]; then
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-lts"
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-lts${TAG_SUFFIX}"
|
||||
fi
|
||||
if [ "$MAJOR" = "$STS_MAJOR" ]; then
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-sts"
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-sts${TAG_SUFFIX}"
|
||||
fi
|
||||
|
||||
echo "Building $VARIANT with tags: $TAGS"
|
||||
@@ -216,12 +228,12 @@ jobs:
|
||||
done
|
||||
cp dockerfiles/sdk.Dockerfile context-sdk/Dockerfile
|
||||
|
||||
TAGS="-t $DOCKER_IMAGE:${VARIANT}-${MAJOR} -t $DOCKER_IMAGE:${VARIANT}-${VERSION}"
|
||||
TAGS="-t $DOCKER_IMAGE:${VARIANT}-${MAJOR}${TAG_SUFFIX} -t $DOCKER_IMAGE:${VARIANT}-${VERSION}${TAG_SUFFIX}"
|
||||
if [ "$MAJOR" = "$LTS_MAJOR" ]; then
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-lts"
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-lts${TAG_SUFFIX}"
|
||||
fi
|
||||
if [ "$MAJOR" = "$STS_MAJOR" ]; then
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-sts"
|
||||
TAGS="$TAGS -t $DOCKER_IMAGE:${VARIANT}-sts${TAG_SUFFIX}"
|
||||
fi
|
||||
|
||||
echo "Building $VARIANT with tags: $TAGS"
|
||||
@@ -240,6 +252,6 @@ jobs:
|
||||
MAJOR="${{ matrix.major }}"
|
||||
for VARIANT in runtime runtime-invariant sdk; do
|
||||
echo "::group::Scout scan: ${VARIANT}-${MAJOR}"
|
||||
docker scout cves ${{ env.DOCKER_IMAGE }}:${VARIANT}-${MAJOR} --only-severity critical,high || true
|
||||
docker scout cves ${{ env.DOCKER_IMAGE }}:${VARIANT}-${MAJOR}${TAG_SUFFIX} --only-severity critical,high || true
|
||||
echo "::endgroup::"
|
||||
done
|
||||
|
||||
Reference in New Issue
Block a user