Update .github/workflows/action.yml

.github/workflows/action.yml

@@ -1,40 +1,41 @@
-name: 'Tag Build and Push Docker image'
+name: Docker Build
-description: 'Tags verion in current repo, builds docker image and pushes it to registry'
+
-inputs:
+on: 
-  registry:  # id of input
+  workflow_call:
-    description: 'docker regisry host name'
+    inputs:
-    required: true
+      registry:  # id of input
-    default: 'gitea.phadric.de'
+        description: 'docker regisry host name'
-  cache-registry:  # id of input
+        required: true
-    description: 'docker regisry host name'
+        default: 'gitea.phadric.de'
-    required: true
+      cache-registry:  # id of input
-    default: 'imagecache.phadric.de'
+        description: 'docker regisry host name'
-  image_name:
+        required: true
-    description: 'name of the dockerimage'
+        default: 'imagecache.phadric.de'
-    required: true
+      image_name:
-    default: ${{ github.repository }}
+        description: 'name of the dockerimage'
-  token:
+        required: true
-    description: 'repo auth token'
+        default: ${{ github.repository }}
-    required: true
+      token:
-  checkout:
+        description: 'repo auth token'
-    description: 'checkout repo first'
+        required: true
-    default: 'true'
-  tag:
-    description: 'checkout repo first'
-    default: 'true'
 
 
-runs:
+jobs:
-  using: "composite"
+  build:
-  steps:
+    runs-on: slim
+    steps:
+      - run: echo "::group::Checkout repository"
+        if: ${{ always() }}
       - name: Checkout repository
-        if: ${{ inputs.checkout == 'true' }}
+        uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
-        uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
         with:
           fetch-depth: '0'
+      - run: echo "::endgroup::"
+        if: ${{ always() }}
+      - run: echo "::group::Bump version and push tag"
+        if: ${{ always() }}
       - name: Bump version and push tag
         id: tag
-        if: ${{ inputs.tag == 'true' }}
         uses: phadric/github-tag-action@a5250a59655e9f4b0350407380a92c73948f2aec # master
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # if you don't want to set write permissions use a PAT token
@@ -43,9 +44,13 @@ runs:
           WITH_V: true
           PRERELEASE: true
           PRERELEASE_SUFFIX: ${{ github.ref_name }}
+      - run: echo "::endgroup::"
+        if: ${{ always() }}
+      - run: echo "::group::Extract Docker metadata"
+        if: ${{ always() }}
       - name: Extract Docker metadata
         id: meta
-        uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
         with:
           flavor: |
             latest=${{ github.ref_name == 'main' || github.ref_name == 'master' }}                                                       
@@ -57,19 +62,35 @@ runs:
             # disabled if major zero
             type=semver,pattern={{major}},value=${{steps.tag.outputs.tag}},enable=${{ !startsWith(steps.tag.outputs.tag, 'v0.') }}                                                
           images: ${{ inputs.registry }}/${{ inputs.image_name }}
-      - uses: int128/docker-build-cache-config-action@fb186e80c08f14a2e56ed9105d4594562bff013f # v1.40.0
+      - run: echo "::endgroup::"
+        if: ${{ always() }}
+      - run: echo "::group::Configure build Cache"
+        if: ${{ always() }}
+      - uses: int128/docker-build-cache-config-action@338206c80bf9eeb2b9694b7b4fc8c247c317e2a8 # v1.38.0
         id: cache
         with:
           image: ${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache
           extra-cache-to: image-manifest=true
+      - run: echo "::endgroup::"
+        if: ${{ always() }}
+      - run: echo "::group::Setup Buildx"
+        if: ${{ always() }}
       - name: Setup Docker buildx
         uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
+      - run: echo "::endgroup::"
+        if: ${{ always() }}
+      - run: echo "::group::Log into Registry ${{ inputs.registry }}"
+        if: ${{ always() }}
       - name: Log into registry ${{ inputs.registry }}
-        uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3.6.0
+        uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
         with:
           registry: ${{ inputs.registry }}
           username: ${{ github.actor }}
           password: ${{ inputs.token }}
+      - run: echo "::endgroup::"
+        if: ${{ always() }}
+      - run: echo "::group::Build and Push docker image"
+        if: ${{ always() }}
       - name: Build and push Docker image
         id: build-and-push
         uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
@@ -85,4 +106,6 @@ runs:
             ${{ steps.cache.outputs.cache-from }}                                                
           cache-to: |
             ${{ steps.cache.outputs.cache-to }}
-            type=registry,ref=${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache:latest,mode=max,image-manifest=true                                                
+            type=registry,ref=${{ inputs.cache-registry }}/${{ inputs.image_name }}-cache:latest,mode=max,image-manifest=true                                                
+      - run: echo "::endgroup::"
+        if: ${{ always() }}

.github/workflows/lint.yml

@@ -17,7 +17,7 @@ jobs:
 
     steps:
     - name: Checkout repository
-      uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4.3.1
+      uses: actions/checkout@08eba0b27e820071cde6df949e0beb9ba4906955 # v4.3.0
     - name: Verify Action
       run: actionlint -ignore 'unexpected key "description" for "workflow" section' -ignore 'nexpected key "inputs" for "workflow" section.' -ignore 'unexpected key "runs" for "workflow" section.' -ignore '"on" section is missing in workflow' -ignore '"jobs" section is missing in workflow' action.yml
     - name: tag latest after success