dockerfiles/.github/workflows/python.yml at master · CubeCoders/dockerfiles · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
name: build python
on:
  workflow_dispatch:
  workflow_run:
    workflows: [build base]
    types: [completed]
    branches:
      - master
  push:
    branches:
      - master
    paths:
      - python/**
      - scripts/python/**

permissions:
  contents: read
  packages: write

jobs:
  check_changes:
    runs-on: ubuntu-latest
    outputs:
      python_changed: ${{ steps.filter.outputs.python_changed || 'false' }}
      base_changed: ${{ steps.filter.outputs.base_changed || 'false' }}
    steps:
      - if: ${{ github.event_name == 'push' }}
        uses: actions/checkout@v4
        with:
          fetch-depth: 0
      - if: ${{ github.event_name == 'push' }}
        id: filter
        uses: dorny/paths-filter@v3
        with:
          filters: |
            python_changed:
              - 'python/**'
              - 'scripts/python/**'
            base_changed:
              - 'base/**'
              - 'scripts/base/ampstart.sh'

  build_and_push:
    needs: [check_changes]
    if: ${{ github.repository_owner == 'CubeCoders' && github.ref == 'refs/heads/master' && ( (github.event_name == 'workflow_run' && github.event.workflow_run.conclusion == 'success') || (github.event_name == 'push' && needs.check_changes.outputs.python_changed == 'true' && needs.check_changes.outputs.base_changed != 'true') || github.event_name == 'workflow_dispatch' ) }}
    name: 'ampbase:python-${{ matrix.python }}'
    runs-on: ubuntu-latest
    strategy:
      fail-fast: false
      matrix:
        python:
          - '3'
          - '3.10'
          - '3.11'
          - '3.12'
          - '3.13'
          - '3.14'

    steps:
      - uses: actions/checkout@v4
        with:
          ref: ${{ github.event_name == 'workflow_run' && github.event.workflow_run.head_sha || github.sha }}

      - uses: docker/setup-qemu-action@v3
      - uses: docker/setup-buildx-action@v3

      - uses: docker/login-action@v3
        with:
          username: ${{ vars.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - run: docker buildx prune -af

      - if: ${{ matrix.python != '3' }}
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./python/${{ matrix.python }}/Dockerfile
          platforms: linux/amd64,linux/arm64/v8
          push: true
          pull: true
          tags: cubecoders/ampbase:python-${{ matrix.python }}
          cache-from: type=gha,scope=${{ github.workflow }}-${{ matrix.python }}
          cache-to: type=gha,mode=max,scope=${{ github.workflow }}-${{ matrix.python }}
          provenance: mode=max
          sbom: true

      - if: ${{ matrix.python == '3' }}
        uses: docker/build-push-action@v6
        with:
          context: .
          file: ./python/${{ matrix.python }}/Dockerfile
          platforms: linux/amd64,linux/arm64/v8
          push: true
          pull: true
          tags: |
            cubecoders/ampbase:python-${{ matrix.python }}
            cubecoders/ampbase:python3
          cache-from: type=gha,scope=${{ github.workflow }}-${{ matrix.python }}
          cache-to: type=gha,mode=max,scope=${{ github.workflow }}-${{ matrix.python }}
          provenance: mode=max
          sbom: true

concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: false