Merge pull request #2034 from radixdlt/scrypto-dev-container-ci

feat: add ci for scrypto-dev-container docker target

.github/workflows/ci-scrypto-dev-container.yml

@@ -0,0 +1,45 @@
+name: Build scrypto-dev-container image
+
+on:
+  push:
+    branches:
+      - develop
+      - main
+      - release\/*
+  pull_request:
+
+jobs:
+  tags:
+    runs-on: ubuntu-latest
+    outputs:
+      tag: ${{ steps.setup_tags.outputs.tag }}
+    steps:
+      - uses: RDXWorks-actions/checkout@main
+        with:
+          fetch-depth: 0
+      - id: setup_tags
+        run: echo "tag=$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT
+  build-amd:
+    permissions:
+      contents: read
+      id-token: write
+      packages: write
+      pull-requests: write
+    needs: tags
+    uses: radixdlt/public-iac-resuable-artifacts/.github/workflows/docker-build.yml@main
+    with:
+      runs_on: gh-runner-scrypto-ubuntu-jammy-16-cores
+      image_registry: "docker.io"
+      image_organization: "radixdlt"
+      image_name: "private-scrypto-dev-container"
+      tag: ${{ needs.tags.outputs.tag }}
+      context: "."
+      dockerfile: "Dockerfile"
+      target: "scrypto-dev-container"
+      platforms: "linux/amd64"
+      provenance: "false"
+      scan_image: true
+      snyk_target_ref: ${{ github.ref_name }}
+      enable_dockerhub: false
+    secrets:
+      role_to_assume: ${{ secrets.DOCKERHUB_RELEASER_ROLE }}

.github/workflows/publish-scrypto-dev-container.yml

@@ -0,0 +1,34 @@
+name: Publish scrypto-dev-container image
+
+on:
+  workflow_dispatch:
+    inputs:
+      docker_tag:
+        description: "Docker tag to be published"
+
+permissions:
+  packages: write
+  pull-requests: write
+  id-token: write
+  contents: read
+
+jobs:
+  build-amd:
+    uses: radixdlt/public-iac-resuable-artifacts/.github/workflows/docker-build.yml@main
+    with:
+      runs_on: ubuntu-16-cores-selfhosted
+      environment: "release"
+      image_registry: "docker.io"
+      image_organization: "radixdlt"
+      image_name: "scrypto-dev-container"
+      tag: ${{ inputs.docker_tag }}
+      context: "."
+      dockerfile: "Dockerfile"
+      target: "scrypto-dev-container"
+      platforms: "linux/amd64"
+      provenance: "false"
+      scan_image: true
+      snyk_target_ref: ${{ github.ref_name }}
+      enable_dockerhub: true
+    secrets:
+      role_to_assume: ${{ secrets.DOCKERHUB_RELEASER_ROLE }}