build-image.yml

name: Build Image

on:
  push:
    branches: [ master ]
    paths:
      - 'build-image/**'
      - '.github/workflows/build-image.yml'
  pull_request:
    branches: [ master ]
    paths:
      - 'build-image/**'
      - '.github/workflows/build-image.yml'

permissions: 
  contents: read

jobs:
  build:
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        name: Checkout
        with:
          fetch-depth: 0

      - name: Set up QEMU
        uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0

      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0

      - name: Save image
        run: make save-multiarch-build-image

      - name: Upload Docker Images Artifacts
        uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
        with:
          name: build-image
          path: |
            ./build-image-amd64.tar
            ./build-image-arm64.tar
          if-no-files-found: error

  push:
    needs: build
    if: (github.ref == 'refs/heads/master' || startsWith(github.ref, 'refs/tags/')) && github.repository == 'cortexproject/cortex'
    runs-on: ubuntu-24.04
    steps:
      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
        name: Checkout
        with:
          fetch-depth: 0

      - name: Download Docker Images Artifacts
        uses: actions/download-artifact@fa0a91b85d4f404e444e00e005971372dc801d16 # v4.1.8
        with:
          name: build-image

      - name: Load image
        run: make load-multiarch-build-image

      - name: Login to Quay.io
        uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
        with:
          registry: quay.io
          username: ${{secrets.QUAY_REGISTRY_USER}}
          password: ${{secrets.QUAY_REGISTRY_PASSWORD}}

      - name: Push image
        run: make push-multiarch-build-image