image-arm-pr.yaml

name: 'Push latest ARM images'

on:
  pull_request:
    paths:
      - '**'

permissions: read-all
concurrency:
  group: ci-arm-${{ github.head_ref || github.ref }}-${{ github.repository }}
  cancel-in-progress: true
env:
  FORCE_COLOR: 1
  EARTHLY_TOKEN: ${{ secrets.EARTHLY_TOKEN }}
jobs:
  opensuse:
    uses: ./.github/workflows/reusable-docker-arm-build.yaml
    secrets: inherit
    permissions:
      id-token: write  # OIDC support
      contents: write
      security-events: write
      actions: read
      attestations: read
      checks: read
      deployments: read
      discussions: read
      issues: read
      packages: read
      pages: read
      pull-requests: read
      repository-projects: read
      statuses: read
    with:
      flavor: opensuse
      flavor_release: leap-15.6
      family: opensuse
      base_image: opensuse/leap:15.6
      model: rpi4
      worker: ARM64
  alpine:
    uses: ./.github/workflows/reusable-docker-arm-build.yaml
    secrets: inherit
    permissions:
      id-token: write  # OIDC support
      contents: write
      security-events: write
      actions: read
      attestations: read
      checks: read
      deployments: read
      discussions: read
      issues: read
      packages: read
      pages: read
      pull-requests: read
      repository-projects: read
      statuses: read
    with:
      flavor: alpine
      flavor_release: "3.19"
      family: alpine
      base_image: alpine:3.19
      model: rpi4
      worker: ARM64