name: Build & push Docker image

on:
  push:
    branches: [master]

jobs:
  build:
    runs-on: docker
    permissions:
      packages: write
    steps:
      - name: Install dependencies
        run: apk add --no-cache git docker-cli docker-cli-buildx

      - name: Checkout
        run: |
          git clone https://oauth2:${{ secrets.FORGEJO_TOKEN }}@git.thirdculture.diy/${{ github.repository }}.git .
          git checkout ${{ github.sha }}

      - name: Login to registry
        run: echo "${{ secrets.REGISTRY_TOKEN }}" | docker login git.thirdculture.diy -u ${{ github.actor }} --password-stdin

      - name: Build and push
        run: |
          docker build --progress=plain -t git.thirdculture.diy/${{ github.repository }}:latest .
          docker push git.thirdculture.diy/${{ github.repository }}:latest