Publish prebaked oci image in github packages

[JeroenKnoops]

Problem

Currently everytime we run this action, the entire project is being build and the entire dotnet build environment is being downloaded. This takes some time.

Proposed solution

On changes in this repository publish the build artifact in this repository. Refer to that build artifact in the action.yml.

[JeroenKnoops]

If you want I can create a PR for this.

[edumserrano]

Sounds like a good idea. Haven't tried to publish an image to github packages yet. What you suggesting is just a github workflow to do that or is there more to it?

I'd appreciate the PR yes.

[JeroenKnoops]

I've created an example in a fork: https://github.com/JeroenKnoops/github-issue-forms-parser/pull/1/files

On changes pushed to main it will build the project and pushes the OCI container to github packages. In the example above, you need to replace to REGISTRY_URL and GITHUB_ORGANIZATION from jeroenknoops to edumserrano.

In the action.yml it will use that container instead of recreating it all the time.

When debugging a feature in a branch, you can switch back to Dockerfile in action.yml in a branch and use that in debugging. Then you will get the current workflow again with a fresh clean build everytime you run it.

Please let me know if this was of any help.

BTW the OCI image also is signed and has both a SLSA provenance file and an SBOM attached to it. We love the Secure Software Supply Chain! https://slsa.dev

[edumserrano]

I merged your PR on this but when I tried to run the workflow I was getting this error:

You can see it here.

Anyway, I've checked the docs on how to publish a Docker Image to Github Packages and followed the docs. I've created this workflow to publish the Dockerfile and update the action accordingly.

The Docker image package for this action is now being published here.

[edumserrano]

I've also updated the docs regarding the workflow changes:

• Documentation for new publish-docker-image workflow
• Added note to the documentation about the test action workflow

[edumserrano]

Did a test PR to make sure the checks are all working as expected with this change. See #8

[edumserrano]

Published version 1.3.0 of this action that uses the Docker image published to GitHub packages.

[edumserrano]

I've also added a workflow to clean up old Docker images from the GitHub registry. See:

• Documentation
• Workflow

[edumserrano]

I believe everything required by this issue has been done. Let me know if there's something missing.

[JeroenKnoops]

The docker-ci-scripts@v5.0.0 had an error. Version 5.1.0 has a fix for that: https://github.com/philips-software/docker-ci-scripts/releases/tag/v5.1.0

The scripts add signing, sbom and provenance, but that's not required for this action.

But the current workflow is also working. Thanks for accepting this change, this makes the action way faster! :)