docker for real this time

Author: lleyton

.github/workflows/docker.yml

@@ -0,0 +1,21 @@
+name: Docker
+
+on:
+  push:
+    # Publish semver tags as releases.
+    tags: ["v*.*.*"]
+  pull_request:
+    branches: ["fyra"]
+  workflow_dispatch:
+
+jobs:
+  docker:
+    uses: FyraLabs/actions/.github/workflows/docker.yml@main
+    with:
+      publish: ${{ github.event_name != 'pull_request' }}
+    permissions:
+      contents: read
+      packages: write
+      # This is used to complete the identity challenge
+      # with sigstore/fulcio when running outside of PRs.
+      id-token: write

.github/workflows/publish.yml

@@ -0,0 +1,14 @@
+# build stage
+FROM golang:alpine AS build
+RUN apk update && apk add git
+ADD . /src
+WORKDIR /src
+ENV CGO_ENABLED=0
+RUN go build \
+    -o /tmp/bin
+# run stage
+FROM scratch
+COPY --from=build /etc/ssl/certs/ca-certificates.crt /etc/ssl/certs/
+WORKDIR /app
+COPY --from=build /tmp/bin /app/bin
+ENTRYPOINT ["/app/bin"]