release.yml

name: Publish package to GitHub Packages
on:
  push:
    branches:
      - main
  pull_request:

env:
  IMAGE_NAME: action

jobs:
  test-image:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3.3.0
      - name: Check that the image builds
        run: docker build . --file Dockerfile
  validate-action:
    runs-on: ubuntu-latest
    if: github.event_name == 'pull_request'
    steps:
      - uses: actions/checkout@v3.3.0
      # This checks that .github/workflows/review-bot.yml is pointing towards the main branch
      # as, during development, we change this to use the code from the test branch and
      # we may forget to set it back to main
      - name: Validate that action points to main branch
        run: |
          BRANCH=$(yq '.jobs.review-approvals.steps[1].uses' $FILE_NAME | cut -d "@" -f2)
          # If the branch is not the main branch
          if [ "$BRANCH" != "$GITHUB_BASE_REF" ]; then
            echo "Action points to $BRANCH. It has to point to $GITHUB_BASE_REF instead!"
            exit 1
          else
            echo "Action is correctly pointing to $GITHUB_BASE_REF"
          fi
        env:
          FILE_NAME: ".github/workflows/review-bot.yml"

  test-versions:
    runs-on: ubuntu-latest
    outputs:
      version: ${{ steps.verification.outputs.VERSION }}
    steps:
      - uses: actions/checkout@v3.3.0
      - name: Extract package.json version
        id: package_version
        run: echo "VERSION=$(jq '.version' -r package.json)" >> $GITHUB_OUTPUT
      - name: Compare versions
        id: verification
        uses: Bullrich/compare-version-on-action@main
        with:
          version: ${{ steps.package_version.outputs.VERSION }}

  tag:
    if: github.event_name == 'push' && needs.test-versions.outputs.version != ''
    needs: [test-image, test-versions]
    runs-on: ubuntu-latest
    permissions:
      contents: write
    outputs:
      tagExists: ${{ steps.checkTag.outputs.exists }}
    steps:
      - uses: mukunku/tag-exists-action@v1.4.0
        id: checkTag
        with: 
          tag: v${{ needs.test-versions.outputs.version }}
      - uses: actions/checkout@v3.3.0
      - name: Tag version and create release
        if: steps.checkTag.outputs.exists == 'false'
        run: gh release create $VERSION --generate-notes
        env:
          VERSION: ${{ needs.test-versions.outputs.version }}
          GH_TOKEN: ${{ github.token }}
  publish:
    runs-on: ubuntu-latest
    permissions:
      packages: write
    needs: [tag, test-versions]
    if: needs.tag.outputs.tagExists == 'false'
    steps:
      - uses: actions/checkout@v3
      - name: Build image
        run: docker build . --file Dockerfile --tag $IMAGE_NAME
      - name: Log into registry
        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login docker.pkg.github.com -u ${{ github.actor }} --password-stdin
      - name: Push image
        run: |
          IMAGE_ID=docker.pkg.github.com/${{ github.repository }}/$IMAGE_NAME
          # Change all uppercase to lowercase
          IMAGE_ID=$(echo $IMAGE_ID | tr '[A-Z]' '[a-z]')
          # Strip git ref prefix from version
          VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')
          # Strip "v" prefix from tag name
          [[ ! -z $TAG ]] && VERSION=$(echo $TAG | sed -e 's/^v//')
          # Use Docker `latest` tag convention
          [ "$VERSION" == "main" ] && VERSION=latest
          echo IMAGE_ID=$IMAGE_ID
          echo VERSION=$VERSION
          docker tag $IMAGE_NAME $IMAGE_ID:$VERSION
          docker push $IMAGE_ID:$VERSION
        env:
          TAG: v${{ needs.test-versions.outputs.version }}