dffml_build_images_containers.yml

# References:
# - https://docs.github.com/en/actions/learn-github-actions/contexts#github-context
# - https://docs.github.com/en/actions/using-workflows/reusing-workflows#calling-a-reusable-workflow
# - https://github.com/intel/dffml/blob/main/.github/workflows/dispatch_build_images_containers.yml
name: "DFFML: Build: Images: Containers"

on:
  workflow_dispatch:
  pull_request:
    branches:
      - main
    paths:
      - ".github/workflows/build_images_containers.yml"
      - ".github/workflows/dffml_build_images_containers.yml"
      - "Dockerfile"
      - "**/*Dockerfile"
      - "**/*.manifest.json"
  push:
    branches:
      - main
    paths:
      - ".github/workflows/build_images_containers.yml"
      - ".github/workflows/dffml_build_images_containers.yml"
      - "Dockerfile"
      - "**/*Dockerfile"
      - "**/*.manifest.json"

jobs:
  manifest:
    runs-on: ubuntu-latest
    outputs:
      length: ${{ steps.create-manifest-instance.outputs.length }}
      manifest: ${{ steps.create-manifest-instance.outputs.github_actions_manifest }}
    steps:
      - name: Harden Runner
        uses: step-security/harden-runner@a4aa98b93cab29d9b1101a6143fb8bce00e2eac4 # v2.7.1
        with:
          egress-policy: audit

      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4.1.6
      - name: Build manifest from changed dockerfiles
        uses: "./.github/actions/create_manifest_instance_build_images_containers"
        id: create-manifest-instance
        with:
          prefix: '[".", "scripts", "dffml/skel/operations"]'
          # TODO Drop non root dir once pinning rebuild chain is active
          no_delta_prefix: '[".", "scripts", "dffml/skel/operations"]'

  build:
    needs: manifest
    uses: "./.github/workflows/build_images_containers.yml"
    if: ${{ fromJSON(needs.manifest.outputs.length) > 0 }}
    with:
      manifests: "${{ needs.manifest.outputs.manifest }}"