name: Publish Docker image
description: Build and push the maintenance image
inputs:
  tag:
    required: true
    description: Docker image tag
  username:
    required: true
    description: Registry username
  password:
    required: true
    description: Registry password
runs:
  using: composite
  steps:
    - name: Set up Docker Buildx
      uses: docker/setup-buildx-action@v4.4.1

    - name: Log in to registry
      shell: bash
      env:
        REGISTRY_USERNAME: ${{ inputs.username }}
        REGISTRY_PASSWORD: ${{ inputs.password }}
      run: printf '%s' "$REGISTRY_PASSWORD" | docker login "$REGISTRY" --username "$REGISTRY_USERNAME" --password-stdin

    - name: Build and push image
      uses: docker/build-push-action@v7.4.0
      with:
        context: .
        push: true
        provenance: false
        build-args: |
          APP_VERSION=${{ gitea.sha }}
          VCS_REF=${{ gitea.sha }}
        tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ inputs.tag }}
        labels: |
          org.opencontainers.image.version=${{ gitea.sha }}
          org.opencontainers.image.revision=${{ gitea.sha }}
          org.opencontainers.image.source=${{ gitea.repositoryUrl }}