Update GitHub Actions workflow for Docker builds

Added permissions for package publishing and modified build jobs for branches and tags.

Author: garanews

.github/workflows/push.yml

@@ -7,12 +7,71 @@ on:
     tags:
       - "v*"
 
+# Necessario per pushare su GHCR
+permissions:
+  contents: read
+  packages: write
+
 env:
   REGISTRY: ghcr.io
-  IMAGE_NAME: ${{ github.repository }}
 
 jobs:
-  test:
+  # Build quando pushi su branch (es. master)
+  build_branch:
+    if: github.ref_type == 'branch'
+    runs-on: ubuntu-latest
+
+    concurrency:
+      group: ${{ github.workflow }}-${{ github.ref }}
+      cancel-in-progress: true
+
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - dockerfile: ./compose/local/django/Dockerfile
+            context:   ./compose/local/django
+            image:     ghcr.io/ldo-cert/orochi_django
+          - dockerfile: ./compose/local/dask/Dockerfile
+            context:   ./compose/local/dask
+            image:     ghcr.io/ldo-cert/orochi_worker
+          - dockerfile: ./compose/local/nginx/Dockerfile
+            context:   ./compose/local/nginx
+            image:     ghcr.io/ldo-cert/orochi_nginx
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Build and push (branch) 🚀
+        uses: docker/build-push-action@v5
+        with:
+          context: ${{ matrix.context }}
+          file:    ${{ matrix.dockerfile }}
+          platforms: linux/amd64,linux/arm64
+          push: ${{ github.event_name != 'pull_request' }}
+          cache-from: type=gha
+          cache-to:   type=gha,mode=max
+          tags: |
+            ${{ matrix.image }}:latest
+            ${{ matrix.image }}:${{ github.sha }}
+
+  # Build quando pushi un tag (v*)
+  build_tag:
+    if: github.ref_type == 'tag'
     runs-on: ubuntu-latest
 
     concurrency:
@@ -24,14 +83,14 @@ jobs:
       matrix:
         include:
           - dockerfile: ./compose/local/django/Dockerfile
-            context: ./compose/local/django
-            image: ghcr.io/ldo-cert/orochi_django
+            context:   ./compose/local/django
+            image:     ghcr.io/ldo-cert/orochi_django
           - dockerfile: ./compose/local/dask/Dockerfile
-            context: ./compose/local/dask
-            image: ghcr.io/ldo-cert/orochi_worker
+            context:   ./compose/local/dask
+            image:     ghcr.io/ldo-cert/orochi_worker
           - dockerfile: ./compose/local/nginx/Dockerfile
-            context: ./compose/local/nginx
-            image: ghcr.io/ldo-cert/orochi_nginx
+            context:   ./compose/local/nginx
+            image:     ghcr.io/ldo-cert/orochi_nginx
 
     steps:
       - name: Checkout code
@@ -43,22 +102,24 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
 
-      - name: Log in to the Container registry
+      - name: Log in to GHCR
         uses: docker/login-action@v3
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
-      - name: Build and push (with layer caching) 🚀
+      - name: Build and push (tagged release) 🏷️
         uses: docker/build-push-action@v5
         with:
           context: ${{ matrix.context }}
-          file: ${{ matrix.dockerfile }}
+          file:    ${{ matrix.dockerfile }}
           platforms: linux/amd64,linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
           cache-from: type=gha
-          cache-to: type=gha,mode=max
+          cache-to:   type=gha,mode=max
+          # Pubblica anche il tag versione (es. v1.2.3)
           tags: |
             ${{ matrix.image }}:latest
             ${{ matrix.image }}:${{ github.sha }}
+            ${{ matrix.image }}:${{ github.ref_name }}