release-branch.yml

name: Test and Release

on:
  pull_request:
    types:
      - opened
      - reopened
      - synchronize
  workflow_dispatch:

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4
      - name: Hub Login
        uses: docker/login-action@v2
        with:
          username: ${{ secrets.DOCKER_USER }}
          password: ${{ secrets.DOCKER_PAT }}
      - name: Prepare scout binary
        run: |
          tar -xf dist/docker-scout_*_linux_amd64.tar.gz -C .
          chmod +x docker-scout
      - name: TEST docker scout version
        run: ./docker-scout version
      - name: TEST docker scout quickview
        run: ./docker-scout quickview alpine:latest
      - name: TEST docker scout cves
        run: ./docker-scout cves docker/scout-demo-service:main
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: Build
        uses: docker/build-push-action@v5
        with:
          context: https://github.com/docker/scout-demo-service.git#fix-all-cves
          push: false
          load: true
          tags: docker/scout-demo-service:fix
      - name: TEST docker scout compare
        run: ./docker-scout compare registry://docker/scout-demo-service:main --to local://docker/scout-demo-service:fix

  release:
    if:  startsWith(github.head_ref, 'release/v')
    permissions:
      contents: write
    outputs:
      tag: ${{ steps.tagname.outputs.value }}
    runs-on: ubuntu-latest
    needs: test
    steps:
      - name: Checkout
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - name: Tag name
        uses: mad9000/actions-find-and-replace-string@2
        id: tagname
        with:
          source: ${{ github.head_ref }}
          find: 'release/'
          replace: ''
      - name: Merge and Tag
        run: |
          git config --unset-all http.https://github.com/.extraheader
          git config --global user.email "${GITHUB_ACTOR}@users.noreply.github.com"
          git config --global user.name "${GITHUB_ACTOR}"
          git merge --ff-only origin/${{ github.head_ref }}
          git tag ${{ steps.tagname.outputs.value }}
          git push https://${GITHUB_ACTOR}:${{ secrets.GITHUB_TOKEN }}@github.com/${{ github.repository }}.git HEAD:main --tags

  create_release:
    needs:
      - release
    uses: ./.github/workflows/release.yml
    permissions:
      contents: write
    with:
      tag: ${{ needs.release.outputs.tag }}