public-ecr.yml

# .github/workflows/public-ecr.yml
name: Build and Push roxprox
on:
  push:
    branches:
      - feat/fix-pipeline
    tags:
      - '[0-9]+.[0-9]+.[0-9]+'

permissions:
      id-token: write
      contents: write    # This is required for actions/checkout@v1
jobs:
  build:
    runs-on: ubuntu-latest
    steps:
      - name: Git clone the repository
        uses: actions/checkout@v1
      - name: configure aws credentials
        uses: aws-actions/configure-aws-credentials@master
        with:
          role-to-assume: arn:aws:iam::${{ secrets.AWS_ACCOUNTID }}:role/github-openvpn
          role-session-name: samplerolesession
          aws-region: eu-west-1
      - name: Docker Login (ECR)
        run: aws ecr-public get-login-password --region us-east-1 | docker login --username AWS --password-stdin public.ecr.aws/y9x3p3i6
      - name: Docker Builld
        run: docker build -t roxprox .
      - name: Tag and push latest
        if: endsWith(github.ref, '/feat/fix-pipeline')
        run: |
          docker tag roxprox:latest public.ecr.aws/y9x3p3i6/roxprox:latest
          docker push public.ecr.aws/y9x3p3i6/roxprox:latest
      - name: Tag and push specific version
        if: startsWith(github.ref, 'refs/tags/')
        run: |
          docker tag roxprox:latest public.ecr.aws/y9x3p3i6/roxprox:${{ github.ref_name }}
          docker push public.ecr.aws/y9x3p3i6/roxprox:${{ github.ref_name }}