Skip to content

fix(drift): classify bare chat-latest alias in openai excludeFamilies #678

fix(drift): classify bare chat-latest alias in openai excludeFamilies

fix(drift): classify bare chat-latest alias in openai excludeFamilies #678

Workflow file for this run

name: Publish Docker Image
on:
push:
tags:
- "v*"
pull_request:
branches:
- main
workflow_dispatch:
env:
REGISTRY: ghcr.io
PRIMARY_IMAGE: ghcr.io/copilotkit/aimock
COMPAT_IMAGE: ghcr.io/copilotkit/llmock
permissions:
contents: read
jobs:
build-and-push:
runs-on: ubuntu-latest
permissions:
contents: read
packages: write
steps:
- name: Checkout
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
with: { persist-credentials: false }
- name: Set up QEMU
uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0
- name: Log in to GHCR
if: github.event_name != 'pull_request'
uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0
with:
registry: ${{ env.REGISTRY }}
username: ${{ github.actor }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Extract metadata (primary — aimock)
id: meta-primary
uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
with:
images: ${{ env.PRIMARY_IMAGE }}
tags: |
type=semver,pattern={{version}}
type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/') }}
- name: Extract metadata (compat — llmock)
id: meta-compat
uses: docker/metadata-action@80c7e94dd9b9319bd5eb7a0e0fe9291e23a2a2e9 # v6.1.0
with:
images: ${{ env.COMPAT_IMAGE }}
tags: |
type=semver,pattern={{version}}
type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/') }}
- name: Build and push
uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
with:
context: .
platforms: linux/amd64,linux/arm64
push: ${{ github.event_name != 'pull_request' }}
tags: |
${{ steps.meta-primary.outputs.tags }}
${{ steps.meta-compat.outputs.tags }}
labels: ${{ steps.meta-primary.outputs.labels }}
# Scope the GHA cache by event so PR builds cannot poison the
# release-tag cache namespace (cache-poisoning hardening).
cache-from: type=gha,scope=${{ github.event_name == 'pull_request' && format('pr-{0}', github.event.number) || 'release' }}
cache-to: type=gha,mode=max,scope=${{ github.event_name == 'pull_request' && format('pr-{0}', github.event.number) || 'release' }}