docker-stable.yml

name: Mark Release as Stable
on:
  workflow_dispatch:
    inputs:
      version:
        description: 'Version to mark as stable (e.g., 1.2.3)'
        required: true

permissions:
  contents: read

jobs:
  stable:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:
          persist-credentials: false

      - name: Check if version exists in PyPI
        id: version_check
        env:
          INPUT_VERSION: ${{ inputs.version }}
        run: |
          if ! curl -s -f "https://pypi.org/pypi/socketsecurity/${INPUT_VERSION}/json" > /dev/null; then
            echo "Error: Version ${INPUT_VERSION} not found on PyPI"
            exit 1
          fi
          echo "Version ${INPUT_VERSION} found on PyPI - proceeding with release"

      - name: Set up Docker publishing
        uses: ./.github/actions/setup-docker
        with:
          dockerhub-username: ${{ secrets.DOCKERHUB_USERNAME }}
          dockerhub-token: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Build & Push Stable Docker
        uses: docker/build-push-action@f9f3042f7e2789586610d6e8b85c8f03e5195baf # v7.2.0
        with:
          push: true
          platforms: linux/amd64,linux/arm64
          cache-from: type=gha
          cache-to: type=gha,mode=max
          tags: socketdev/cli:stable
          build-args: |
            CLI_VERSION=${{ inputs.version }}