More fixes to the verification process #1148

	name: Build Private Images GHCR

	on:
	push:
	branches: [master, stable]
	tags: ['r*']
	pull_request:
	types: [synchronize, labeled]

	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}
	cancel-in-progress: true

	jobs:
	build:
	if: ${{ github.event_name == 'push' \|\| contains(github.event.pull_request.labels.*.name, 'deploy-to-staging') }}
	runs-on: buildjet-16vcpu-ubuntu-2204

	permissions:
	contents: read
	packages: write

	steps:
	- name: Docker meta
	id: meta
	uses: docker/[email protected]
	with:
	images: ghcr.io/plausible/analytics/ee
	tags: \|
	type=ref,event=pr
	type=ref,event=branch
	type=ref,event=tag

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Login to GitHub Container Registry
	uses: docker/login-action@v3
	with:
	registry: ghcr.io
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}

	- name: Build and push
	id: docker_build
	uses: docker/build-push-action@v5
	with:
	push: true
	tags: ${{ steps.meta.outputs.tags }}
	labels: ${{ steps.meta.outputs.labels }}
	cache-from: type=gha
	cache-to: type=gha,mode=max
	build-args: \|
	MIX_ENV=prod
	BUILD_METADATA=${{ steps.meta.outputs.json }}

	- name: Image digest
	run: echo ${{ steps.docker_build.outputs.digest }}

	- name: Notify team on failure
	if: ${{ failure() }}
	uses: fjogeleit/http-request-action@v1
	with:
	url: ${{ secrets.BUILD_NOTIFICATION_URL }}
	method: 'POST'
	customHeaders: '{"Content-Type": "application/json"}'
	data: '{"content": "<a href=\"https://github.com/plausible/analytics/actions/workflows/build-private-images.yml\">Build failed</a>"}'

Provide feedback