diff options
| author | tranch <tranch.xiao@gmail.com> | 2026-07-09 17:21:21 +0800 |
|---|---|---|
| committer | tranch <tranch.xiao@gmail.com> | 2026-07-09 17:21:21 +0800 |
| commit | 61a3dd784f1bb36b89644e158c4e9d75da736935 (patch) | |
| tree | f800e5d9e89398e33845e46764101bb55aa39dc7 /.github/workflows/build.yml | |
| parent | ed40e44b610cac878f17fa4233d8e3d19b8d67bb (diff) | |
| download | AeroCore-OS-61a3dd784f1bb36b89644e158c4e9d75da736935.tar.gz AeroCore-OS-61a3dd784f1bb36b89644e158c4e9d75da736935.zip | |
Push build images to ACR
Add an ACR publish step after the existing GHCR publish and signing flow. The step is gated to non-PR default-branch runs and only executes when ACR_REGISTRY and ACR_NAMESPACE repository variables are set.
Verification: ruby YAML parser loaded .github/workflows/build.yml successfully.
Diffstat (limited to '.github/workflows/build.yml')
| -rw-r--r-- | .github/workflows/build.yml | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index 90371c8..b822ac6 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -163,3 +163,23 @@ jobs: DIGEST: ${{ steps.push-image.outputs.digest }} run: | cosign sign -y --key env://COSIGN_PRIVATE_KEY ${IMAGE_REGISTRY}/${IMAGE_NAME}@${DIGEST} + + - name: Push To ACR + if: | + github.event_name != 'pull_request' && + github.ref == format('refs/heads/{0}', github.event.repository.default_branch) && + vars.ACR_REGISTRY != '' && + vars.ACR_NAMESPACE != '' + env: + ACR_REGISTRY: ${{ vars.ACR_REGISTRY }} + ACR_NAMESPACE: ${{ vars.ACR_NAMESPACE }} + ACR_USERNAME: ${{ secrets.ACR_USERNAME }} + ACR_PASSWORD: ${{ secrets.ACR_PASSWORD }} + ALIAS_TAGS: ${{ steps.gen-build-tags.outputs.alias_tags }} + run: | + set -euo pipefail + echo "$ACR_PASSWORD" | sudo -E podman login "$ACR_REGISTRY" -u "$ACR_USERNAME" --password-stdin + + for tag in ${ALIAS_TAGS}; do + sudo -E podman push "${IMAGE_NAME}:${tag}" "${ACR_REGISTRY}/${ACR_NAMESPACE}/${IMAGE_NAME}:${tag}" + done |