name: Build and push

on:
  push:
    branches: [main]
  workflow_dispatch: {}
  
jobs:
  build:
    runs-on: [amd64, prod]
    # container:
    #   image: harbor.rosti.cz/library/builder:38
    #   options: --privileged --security-opt seccomp=unconfined
    steps:
    - uses: actions/checkout@v3
    - name: Login into registry
      env:
        REGISTRY: harbor.rosti.cz
        USERNAME: robot_library+lib
        PASSWORD: ${{ secrets.REGISTRY_TOKEN }}
      run: |
        docker login -u "$USERNAME" -p "$PASSWORD" $REGISTRY 
    - name: Build
      run: |
        task build
    - name: Push
      run: |
        task push