docker-build.yml

name: Build and Publish Docker

on:
  release:
    types:
      - released

  # Allows you to run this workflow manually from the Actions tab
  workflow_dispatch:
    inputs:
      tag:
        description: "Tag to set for the Docker Image"
        required: true

jobs:
  docker:
    strategy:
      matrix:
        platform: [linux/amd64]
        release: [opportunity-standalone, standard-collator]
    runs-on: ubuntu-20.04
    steps:
      - uses: actions/checkout@v3

      - name: Download artifact
        uses: dawidd6/action-download-artifact@v2
        with:
          workflow: binary-build.yml

      - name: Display structure of downloaded files
        run: ls -R

      - name: Artifact move - ${{ matrix.platform }} - ${{ matrix.release }}
        if: ${{ matrix.platform == 'linux/amd64' }}
        run: |
          mv standard-substrate-linux-x86_64/${{ matrix.release }}-linux-x86_64 ./${{ matrix.release }}

      - name: Artifact move - ${{ matrix.platform }} - ${{ matrix.release }}
        if: ${{ matrix.platform == 'darwin/amd64' }}
        run: |
          mv standard-substrate-darwin-x86_64/${{ matrix.release }}-darwin-x86_64 ./${{ matrix.release }}

      - name: Make executable - ${{ matrix.platform }} - ${{ matrix.release }}
        run: |
          chmod +x ./${{ matrix.release }}

      - name: Set up Docker Buildx - ${{ matrix.platform }} - ${{ matrix.release }}
        id: buildx
        uses: docker/setup-buildx-action@v1

      - name: Login to DockerHub - ${{ matrix.platform }} - ${{ matrix.release }}
        uses: docker/login-action@v1.14.1
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build and push Docker images - ${{ matrix.platform }} - ${{ matrix.release }}
        id: docker_build
        uses: docker/build-push-action@v5.1.0
        with:
          context: .
          builder: ${{ steps.buildx.outputs.name }}
          file: ./docker/${{ matrix.release }}.release
          platforms: ${{ matrix.platform }}
          tags: |
            standardprotocol/${{ matrix.release }}:${{ github.event.release.tag_name != null && github.event.release.tag_name || github.event.inputs.tag }}
            standardprotocol/${{ matrix.release }}:latest
          push: true

      - name: Run Snyk to check for vulnerabilities - ${{ matrix.release }}
        uses: snyk/actions/docker@master
        continue-on-error: true
        env:
          SNYK_TOKEN: ${{ secrets.SNYK_TOKEN }}
        with:
          image: standardprotocol/${{ matrix.release }}:latest
          args: --file=./docker/${{ matrix.release }}.release

      - name: Image digest
        run: |
          echo ${{ steps.docker_build.outputs.digest }}