name: Push a new Docker image

on:
  workflow_run:
    workflows: ["Build"]
    branches: [main]
    types:
      - completed

jobs:
  build-and-push-image:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      packages: write

    steps:
      - uses: actions/checkout@v6
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v4
      # Build and test on native platform before multi-arch push
      - name: Build Docker image for testing
        uses: docker/build-push-action@v7
        with:
          context: .
          load: true
          tags: vnu-test:latest
      - name: Test vnu CLI is available
        run: |
          docker run --rm vnu-test:latest vnu --version
          docker run --rm vnu-test:latest vnu --help
      - name: Test vnu can check HTML
        run: |
          echo '<!DOCTYPE html><html><head><title>Test</title></head><body></body></html>' > /tmp/test.html
          docker run --rm -v /tmp:/tmp vnu-test:latest vnu /tmp/test.html

      - name: Log in to the container registry
        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}
      - name: Extract metadata (tags, labels)
        id: meta
        uses: docker/metadata-action@v6
        with:
          images: ghcr.io/validator/validator
          tags: type=semver,pattern={{version}}
      - name: Build and push Docker image
        uses: docker/build-push-action@v7
        with:
          context: .
          platforms: linux/amd64,linux/arm64
          push: true
          no-cache: true
          tags: ghcr.io/validator/validator:latest, ${{ steps.meta.outputs.tags }}
          labels: ${{ steps.meta.outputs.labels }}
