bcgov / digital-trust-common-service / 31433826847

87%

push

github

feat(ci): add latest image tag to tagged releases (#169)

* feat(ci): add latest image tag to tagged releases

Signed-off-by: Emiliano Suñé <2395873+esune@users.noreply.github.com>

* refactor(ci): simplify build-image tag computation

Replace bash heredoc tag generation with a minimal pr_tags variable and let
docker/metadata-action own all tag rules via multi-line YAML input.

- 'Compute PR tag' now only outputs pr_tags (empty on non-PR builds)
- All standard tag rules (sha-, main, semver, latest) moved to metadata step
- Removes the need for the heredoc workaround documented in the old comment

Signed-off-by: Emiliano Suñé <2395873+esune@users.noreply.github.com>

* ci: simplify PR image cleanup to exact tag match

Switch image-tags pattern from wildcard (pr-<N> pr-<N>-*) to exact match
(pr-<N>) to align with the mutable single-tag PR strategy.

Signed-off-by: Emiliano Suñé <2395873+esune@users.noreply.github.com>

* ci: add nightly GHCR cleanup for orphaned and stale PR images

Two jobs run nightly at 02:00 UTC:

cleanup-untagged: removes images with no tags (from failed builds, rebases,
or intermediate layers) that are older than 24 hours.

cleanup-stale-pr-tags: removes images whose tag matches pr-* and are older
than 7 days. This catches both the old pr-<N>-<sha> format left over from
the previous tagging strategy and any pr-<N> tags that survived PR close
(e.g. from fork PRs that bypass pr-cleanup.yml).

Signed-off-by: Emiliano Suñé <2395873+esune@users.noreply.github.com>

* fix(ci): disable sha- tag for PR and version-tag builds

- PR builds: github.sha is the synthetic merge commit, not the head SHA,
  so the sha- tag would misrepresent the image contents
- Version-tag builds: sha- is redundant alongside the semver tags

sha- is now only produced on main-branch pushes where it is accurate and useful.

Signed-off-by: Emiliano Suñé <2395873+esune@users.noreply.github.com>

* fix(ci): add missing colon to workflow_dispatch trigger

wo... (continued)

1264 of 1607 branches covered (78.66%)

Branch coverage included in aggregate %.

2364 of 2576 relevant lines covered (91.77%)

9.07 hits per line