ci: continuous image generation in github registry (#31)

Signed-off-by: Carlos Feria <[email protected]>

Author: carlosthe19916

.github/workflows/image-build.yml

@@ -0,0 +1,50 @@
+name: Multiple Architecture Image Build
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - "main"
+      - "release/*"
+    tags:
+      - "v*"
+
+concurrency:
+  group: build-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  image-build:
+    uses: securesign/rhtas-console-ui/.github/workflows/build-push-images.yaml@main
+    with:
+      registry: "ghcr.io"
+      image_name: "${{ github.repository_owner }}/rhtas-console"
+      containerfile: "./Dockerfile"
+      architectures: '[ "amd64", "arm64" ]'
+      extra-args: "--ulimit nofile=4096:4096"
+    secrets:
+      registry_username: ${{ github.actor }}
+      registry_password: ${{ secrets.GITHUB_TOKEN }}
+
+  attestations:
+    needs: image-build
+    runs-on: ubuntu-latest
+    permissions:
+      id-token: write
+      contents: read
+      attestations: write
+      packages: write
+    steps:
+      - name: Log in to registry
+        uses: redhat-actions/podman-login@4934294ad0449894bcd1e9f191899d7292469603 #v1
+        with:
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+          registry: ghcr.io
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@977bb373ede98d70efdf65b84cb5f73e068dcc2a # v3
+        with:
+          subject-name: ghcr.io/${{ github.repository_owner }}/rhtas-console
+          subject-digest: ${{ needs.image-build.outputs.digest }}
+          push-to-registry: true
+

Dockerfile

@@ -0,0 +1,26 @@
+# Build stage
+FROM golang:1.25 AS builder
+
+WORKDIR /app
+
+COPY . .
+
+RUN go build -buildvcs=false -o rhtas_console ./cmd/rhtas_console
+
+# Final stage
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.6
+
+# Set a writable working directory
+WORKDIR /tmp
+ENV HOME=/tmp
+
+COPY --from=builder /app/rhtas_console /tmp/rhtas_console
+COPY internal/db/migrations /tmp/internal/db/migrations
+
+USER 65532:65532
+
+# Expose API port
+EXPOSE 8080
+
+#ENTRYPOINT
+ENTRYPOINT ["/tmp/rhtas_console"]