Merge pull request #4 from opslabhqx/renovate/ci-pin-dependencies #7

	---
	name: build-push

	on:
	push:
	branches:
	- main
	workflow_dispatch:

	env:
	OWNER: opslabhq
	FILE: ${{ github.event.repository.name }}

	permissions:
	contents: read

	jobs:
	build-push:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	checks: write
	steps:
	- uses: actions/checkout@d632683dd7b4114ad314bca15554477dd762a938 # v4.2.0
	with:
	show-progress: false

	- name: Set up QEMU
	uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3

	- name: Login to DockerHub
	uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
	with:
	username: opslabhq
	password: ${{ secrets.DOCKER_SECRET }}

	- name: Login to GitHub Container Registry
	uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3
	with:
	registry: ghcr.io
	username: ${{ github.repository_owner }}
	password: ${{ secrets.GH_SECRET }}

	- name: Extract version from Dockerfile
	id: extract_version
	run: \|
	echo "OWNER=${OWNER,,}" >> $GITHUB_ENV
	echo "OWNER=${OWNER,,}"

	echo "FILE=${FILE,,}" >> $GITHUB_ENV
	echo "FILE=${FILE,,}"

	TAG=$(grep -oP '^ARG ALPINE_VERSION=\K.*' Dockerfile)
	echo "TAG=${TAG,,#v}" >> $GITHUB_ENV
	echo "TAG=${TAG,,#v}"

	- name: Push
	uses: docker/bake-action@e626c7390c9f95508a135a89e65ec698e061fb2a # v5
	with:
	targets: push

Provide feedback