feat: release docker image

.dockerignore

@@ -6,3 +6,5 @@
 
 !package.json
 !package-lock.json
+
+!target/release

.github/pipeline/dockerBuild.sh

@@ -0,0 +1,11 @@
+#!/usr/bin/env sh
+
+set -ex
+
+release_version=$1
+image_name="ghcr.io/postfinance/propeller:$release_version"
+
+echo "$GITHUB_TOKEN " | docker login ghcr.io -u "$GITHUB_USERNAME" --password-stdin
+
+docker build --build-arg "RELEASE_VERSION=$release_version" -t "$image_name" .
+docker push "$image_name"

.github/workflows/release.yml

@@ -18,6 +18,7 @@ jobs:
     permissions:
       contents: write
       issues: write
+      packages: write
       pull-requests: write
     steps:
       - name: Check out code
@@ -49,4 +50,5 @@ jobs:
       - name: Semantic Release
         run: npx semantic-release
         env:
+          GITHUB_USERNAME: ${{ github.actor }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Dockerfile

@@ -0,0 +1,18 @@
+FROM debian:bullseye-slim
+
+ARG RELEASE_VERSION
+
+LABEL org.opencontainers.image.title="propeller"
+LABEL org.opencontainers.image.source="https://github.com/postfinance/propeller"
+LABEL org.opencontainers.image.description="A secret rotation tool for applications running in Kubernetes, using HashiCorp Vault and ArgoCD."
+LABEL org.opencontainers.image.licenses="Apache-2.0"
+LABEL org.opencontainers.image.version="$RELEASE_VERSION"
+LABEL org.opencontainers.image.vendor="PostFinance AG"
+
+RUN apt-get update \
+    && apt-get install -y ca-certificates \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY target/release/propeller /usr/local/bin/propeller
+
+ENTRYPOINT ["propeller"]

release.config.js

@@ -10,6 +10,7 @@ module.exports = {
       '@semantic-release/exec',
       {
         prepareCmd: '.github/pipeline/prepareCmd.sh ${nextRelease.version}',
+        publishCmd: '.github/pipeline/dockerBuild.sh ${nextRelease.version}',
       },
     ],
     [