tag-version.yml

name: Update and Tag

# This workflow uses actions that are not certified by GitHub.
# They are provided by a third-party and are governed by
# separate terms of service, privacy policy, and support
# documentation.

on:
  schedule:
    - cron: '38 1 * * *'
  push:
    branches:
    - 'main'

env:
  # Use docker.io for Docker Hub if empty
  REGISTRY: ghcr.io
  # github.repository as <account>/<repo>
  IMAGE_NAME: ${{ github.repository }}

jobs:
  build:

    runs-on: ubuntu-latest
    permissions:
      contents: write
      packages: write
      # This is used to complete the identity challenge
      # with sigstore/fulcio when running outside of PRs.
      id-token: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@v3
        with:
          ssh-key: "${{ secrets.ACTIONS_SSH_KEY }}"

      - name: Setup Task
        uses: arduino/setup-task@v1
        with:
          version: 3.x
      
      - name: Run clean Task
        if: github.event_name != 'pull_request'
        run: task clean

      - name: Run build Task
        run: task build

      - name: Run git-tag Task
        run: task git-tag
        if: github.event_name != 'pull_request' && github.ref_type != 'tag'
        env:
          GIT_AUTHOR_NAME: github-actions[bot]
          GIT_AUTHOR_EMAIL: 41898282+github-actions[bot]@users.noreply.github.com
          GIT_COMMITTER_NAME: github-actions[bot]
          GIT_COMMITTER_EMAIL: 41898282+github-actions[bot]@users.noreply.github.com