Update GitHub release workflows

.github/actions/docker-build/action.yml

@@ -0,0 +1,34 @@
+name: Build Docker image
+
+on:
+  workflow_call:
+    inputs:
+      version:
+        required: true
+        type: string
+      latest:
+        required: false
+        type: boolean
+        default: false
+
+runs:
+  using: "composite"
+  steps:
+    - uses: actions/checkout@v3
+    - name: Log in to registry
+      run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u $ --password-stdin
+    - uses: hadolint/[email protected]
+      with:
+        dockerfile: Dockerfile
+        ignore: DL3045,DL3007
+    - name: Build and push image
+      run: |
+        IMAGE_ID=$(echo "ghcr.io/${{ github.repository_owner }}/${{ vars.DOCKER_IMAGE_NAME }}" | tr '[A-Z]' '[a-z]')
+        echo "IMAGE_ID=$IMAGE_ID" >> "$GITHUB_OUTPUT"
+        docker build --tag $IMAGE_ID:${{ inputs.version }} --platform=linux/amd64 .
+        docker push $IMAGE_ID:${{ inputs.version }}
+    - name: Tag latest
+      if: inputs.latest
+      run: |
+        docker tag $IMAGE_ID:${{ inputs.version }} $IMAGE_ID:latest --platform=linux/amd64 .
+        docker push $IMAGE_ID:latest

.github/workflows/cd-feature.yml

@@ -10,13 +10,16 @@ jobs:
   deploy:
     name: Deploy to AWS
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: read
     steps:
       - uses: actions/checkout@v3
       - name: Get tag
         id: version-tag
         uses: ./.github/actions/get-version-tag
       - name: Build
-        uses: ./.github/workflows/_docker-build.yml
+        uses: ./.github/actions/docker-build
         with:
           version: ${{ steps.version-tag.outputs.VERSION }}
       - name: Install AWS CLI

.github/workflows/cd-main.yml

@@ -10,13 +10,16 @@ jobs:
   deploy:
     name: Deploy to AWS
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: read
     steps:
       - uses: actions/checkout@v3
       - name: Get tag
         id: version-tag
         uses: ./.github/actions/get-version-tag
       - name: Build
-        uses: ./.github/workflows/_docker-build.yml
+        uses: ./.github/actions/docker-build
         with:
           version: ${{ steps.version-tag.outputs.VERSION }} # (latest)
       - name: Install AWS CLI

.github/workflows/release.yml

@@ -10,13 +10,16 @@ jobs:
   build:
     name: Build and deploy to AWS
     runs-on: ubuntu-latest
+    permissions:
+      packages: write
+      contents: read
     steps:
       - uses: actions/checkout@v3
       - name: Get tag
         id: version-tag
         uses: ./.github/actions/get-version-tag
       - name: Build
-        uses: ./.github/workflows/_docker-build.yml
+        uses: ./.github/actions/docker-build
         with:
           version: ${{ steps.version-tag.outputs.VERSION }}
           latest: true