build_container.yml

name: Release Mondoo Container Image

on:
  release:
    types: [released]
  workflow_dispatch:


jobs:
  build_container:
    runs-on: ubuntu-latest
    timeout-minutes: 10
    name: Build Docker
    steps:
      - name: Clone repository
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Get Latest Tag
        id: vars
        uses: WyriHaximus/github-action-get-previous-tag@v1

      - name: Parse semver string
        id: semver
        uses: booxmedialtd/ws-action-parse-semver@v1
        with:
          input_string: ${{ steps.vars.outputs.tag }}
      - name: Clean Version Tag
        id: version
        run: |
          VERSION=$(echo "${{ steps.vars.outputs.tag }}" | sed -e 's/^v//')
          echo "version=$VERSION" >> $GITHUB_OUTPUT
          echo "VERSION=$VERSION" >> $GITHUB_ENV

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
        with:
          image: tonistiigi/binfmt:latest
          platforms: arm64,arm

      - name: Set up Docker BuildX
        uses: docker/setup-buildx-action@v3

      - name: Login to DockerHub
        uses: docker/login-action@v3
        with:
          username: ${{ secrets.DOCKER_USERNAME }}
          password: ${{ secrets.DOCKER_PASSWORD }}

      - name: Build and push root images
        uses: docker/build-push-action@v6
        with:
          sbom: true
          provenance: true
          context: .
          platforms: linux/amd64,linux/arm64
          push: true
          build-args: VERSION=${{ steps.version.outputs.version }}
          target: root
          tags: |
            mondoolabs/mondoo:${{ steps.version.outputs.version }}
            mondoolabs/mondoo:${{ steps.semver.outputs.major }}
            mondoolabs/mondoo:latest
            mondoo/client:${{ steps.version.outputs.version }}
            mondoo/client:${{ steps.semver.outputs.major }}
            mondoo/client:latest

      - name: Build and push devkit images
        # make it optional until we fixed https://github.com/mondoohq/cnquery/issues/3107
        continue-on-error: true
        uses: docker/build-push-action@v6
        with:
          sbom: true
          provenance: true
          context: .
          file: Dockerfile-dev
          platforms: linux/amd64,linux/arm64,linux/arm/v6,linux/arm/v7
          push: true
          build-args: VERSION=${{ steps.version.outputs.version }}
          target: root
          tags: |
            mondoo/devkit:${{ steps.version.outputs.version }}
            mondoo/devkit:${{ steps.semver.outputs.major }}
            mondoo/devkit:latest

      - name: Build and push rootless images
        uses: docker/build-push-action@v6
        with:
          sbom: true
          provenance: true
          context: .
          platforms: linux/amd64,linux/arm64,linux/arm/v6,linux/arm/v7
          push: true
          build-args: VERSION=${{ steps.version.outputs.version }}
          target: rootless
          tags: |
            mondoo/client:${{ steps.version.outputs.version }}-rootless
            mondoo/client:${{ steps.semver.outputs.major }}-rootless
            mondoo/client:latest-rootless

      - name: Build and push root images (ubi)
        uses: docker/build-push-action@v6
        with:
          sbom: true
          provenance: true
          context: .
          file: Dockerfile-ubi
          platforms: linux/amd64,linux/arm64
          push: true
          build-args: VERSION=${{ steps.version.outputs.version }}
          target: root
          tags: |
            mondoo/client:${{ steps.version.outputs.version }}-ubi
            mondoo/client:${{ steps.semver.outputs.major }}-ubi
            mondoo/client:latest-ubi

      - name: Build and push rootless images (ubi)
        uses: docker/build-push-action@v6
        with:
          sbom: true
          provenance: true
          context: .
          file: Dockerfile-ubi
          platforms: linux/amd64,linux/arm64
          push: true
          build-args: VERSION=${{ steps.version.outputs.version }}
          target: rootless
          tags: |
            mondoo/client:${{ steps.version.outputs.version }}-ubi-rootless
            mondoo/client:${{ steps.semver.outputs.major }}-ubi-rootless
            mondoo/client:latest-ubi-rootless