Skip to content

ci: publish cbioportal/mcp:beta on pushes to beta (main) #157

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ForisKuang merged 3 commits into from
Sep 30, 2026
Merged

ci: publish cbioportal/mcp:beta on pushes to beta (main) #157

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
ff488b3
ci: publish cbioportal/mcp:beta on pushes to the beta branch
Sep 27, 2026
4a6d2c1
ci: pass tag inputs via env and validate dispatch ref
Sep 27, 2026
9fef70e
ci: validate dispatch ref as a whole string, not per line
Sep 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
63 changes: 50 additions & 13 deletions .github/workflows/docker_ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,10 +4,11 @@ on:
push:
branches:
- main
- beta
workflow_dispatch:
inputs:
ref:
description: "Git ref to build and tag the image (branch, tag, or commit SHA)"
description: "Docker tag / ref (no slashes) to build and tag the image: branch, tag, or commit SHA"
type: string
required: true

Expand All @@ -31,16 +32,33 @@ jobs:
ref: ${{ github.event_name == 'workflow_dispatch' && github.event.inputs.ref != '' && github.event.inputs.ref || github.ref }}

- name: Set image tag
id: set-tag
shell: bash
run: |
if [ -n "${{ github.event.inputs.ref }}" ]; then
echo "IMAGE_TAG=${{ github.event.inputs.ref }}" >> $GITHUB_ENV
if [ -n "$INPUT_REF" ]; then
# Whole-string match (not per-line like grep -x): the ref must be exactly one
# Docker tag, so a newline can't smuggle extra lines into $GITHUB_ENV.
tag_re='^[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}$'
if ! [[ "$INPUT_REF" =~ $tag_re ]]; then
echo "ref is not a valid Docker tag: $INPUT_REF" >&2
exit 1
fi
echo "IMAGE_TAG=$INPUT_REF" >> "$GITHUB_ENV"
elif [ "$EVENT_NAME" = "push" ] && [ "$REF_NAME" = "beta" ]; then
# Beta pushes publish only :beta and must never touch :latest.
echo "IMAGE_TAG=beta" >> "$GITHUB_ENV"
elif [ "$EVENT_NAME" = "push" ] && [ "$REF_NAME" = "main" ]; then
echo "IMAGE_TAG=latest" >> "$GITHUB_ENV"
else
echo "IMAGE_TAG=latest" >> $GITHUB_ENV
echo "Unexpected trigger $EVENT_NAME on $REF_NAME; refusing to pick a tag" >&2
exit 1
fi
echo "PLATFORM_PAIR=${platform//\//-}" >> $GITHUB_ENV
echo "PLATFORM_PAIR=${platform//\//-}" >> "$GITHUB_ENV"
env:
platform: ${{ matrix.platform }}
INPUT_REF: ${{ github.event.inputs.ref }}
EVENT_NAME: ${{ github.event_name }}
REF_NAME: ${{ github.ref_name }}
LC_ALL: C

- name: Log in to DockerHub
uses: docker/login-action@v3
Expand All @@ -60,8 +78,8 @@ jobs:
platforms: ${{ matrix.platform }}
# Push by digest only; the merge job tags the final manifest.
outputs: type=image,name=cbioportal/mcp,push-by-digest=true,name-canonical=true,push=true
cache-from: type=gha,scope=${{ env.PLATFORM_PAIR }}
cache-to: type=gha,scope=${{ env.PLATFORM_PAIR }},mode=max
cache-from: type=gha,scope=${{ env.PLATFORM_PAIR }}-${{ env.IMAGE_TAG }}
cache-to: type=gha,scope=${{ env.PLATFORM_PAIR }}-${{ env.IMAGE_TAG }},mode=max

- name: Export digest
run: |
Expand All @@ -82,12 +100,31 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Set image tag
shell: bash
run: |
if [ -n "${{ github.event.inputs.ref }}" ]; then
echo "IMAGE_TAG=${{ github.event.inputs.ref }}" >> $GITHUB_ENV
if [ -n "$INPUT_REF" ]; then
# Whole-string match (not per-line like grep -x): the ref must be exactly one
# Docker tag, so a newline can't smuggle extra lines into $GITHUB_ENV.
tag_re='^[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}$'
if ! [[ "$INPUT_REF" =~ $tag_re ]]; then
echo "ref is not a valid Docker tag: $INPUT_REF" >&2
exit 1
fi
echo "IMAGE_TAG=$INPUT_REF" >> "$GITHUB_ENV"
elif [ "$EVENT_NAME" = "push" ] && [ "$REF_NAME" = "beta" ]; then
# Beta pushes publish only :beta and must never touch :latest.
echo "IMAGE_TAG=beta" >> "$GITHUB_ENV"
elif [ "$EVENT_NAME" = "push" ] && [ "$REF_NAME" = "main" ]; then
echo "IMAGE_TAG=latest" >> "$GITHUB_ENV"
else
echo "IMAGE_TAG=latest" >> $GITHUB_ENV
echo "Unexpected trigger $EVENT_NAME on $REF_NAME; refusing to pick a tag" >&2
exit 1
fi
env:
INPUT_REF: ${{ github.event.inputs.ref }}
EVENT_NAME: ${{ github.event_name }}
REF_NAME: ${{ github.ref_name }}
LC_ALL: C

- name: Download digests
uses: actions/download-artifact@v4
Expand All @@ -108,8 +145,8 @@ jobs:
- name: Create multi-arch manifest
working-directory: /tmp/digests
run: |
docker buildx imagetools create -t cbioportal/mcp:${{ env.IMAGE_TAG }} \
docker buildx imagetools create -t "cbioportal/mcp:$IMAGE_TAG" \
$(printf 'cbioportal/mcp@sha256:%s ' *)

- name: Inspect
run: docker buildx imagetools inspect cbioportal/mcp:${{ env.IMAGE_TAG }}
run: docker buildx imagetools inspect "cbioportal/mcp:$IMAGE_TAG"
Loading