Consolidate GitHub Actions CI from 15 to 5 workflow files (#757)

.github/workflows/docker-push-release.yml

@@ -2,6 +2,7 @@ name: Publish docker image (release)
 
 env:
   DOCKER_IMAGE: katanemo/plano
+  GHCR_IMAGE: ghcr.io/${{ github.repository_owner }}/plano
 
 on:
   release:
@@ -9,9 +10,10 @@ on:
 
 permissions:
   contents: read
+  packages: write
 
 jobs:
-  # Build ARM64 image on native ARM64 runner
+  # Build ARM64 image on native ARM64 runner — push to both registries
   build-arm64:
     runs-on: [linux-arm64]
     steps:
@@ -24,7 +26,14 @@ jobs:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
-      - name: Extract metadata (tags, labels) for Docker
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata for Docker
         id: meta
         uses: docker/metadata-action@v5
         with:
@@ -39,9 +48,11 @@ jobs:
           file: ./Dockerfile
           platforms: linux/arm64
           push: true
-          tags: ${{ steps.meta.outputs.tags }}-arm64
+          tags: |
+            ${{ steps.meta.outputs.tags }}-arm64
+            ${{ env.GHCR_IMAGE }}:${{ github.event.release.tag_name }}-arm64
 
-  # Build AMD64 image on GitHub's AMD64 runner
+  # Build AMD64 image on GitHub's AMD64 runner — push to both registries
   build-amd64:
     runs-on: ubuntu-latest
     steps:
@@ -54,7 +65,14 @@ jobs:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
-      - name: Extract metadata (tags, labels) for Docker
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata for Docker
         id: meta
         uses: docker/metadata-action@v5
         with:
@@ -69,12 +87,14 @@ jobs:
           file: ./Dockerfile
           platforms: linux/amd64
           push: true
-          tags: ${{ steps.meta.outputs.tags }}-amd64
+          tags: |
+            ${{ steps.meta.outputs.tags }}-amd64
+            ${{ env.GHCR_IMAGE }}:${{ github.event.release.tag_name }}-amd64
 
-  # Combine ARM64 and AMD64 images into a multi-arch manifest
+  # Combine ARM64 and AMD64 images into multi-arch manifests for both registries
   create-manifest:
     runs-on: ubuntu-latest
-    needs: [build-arm64, build-amd64]  # Wait for both builds
+    needs: [build-arm64, build-amd64]
     steps:
       - name: Log in to Docker Hub
         uses: docker/login-action@v3
@@ -82,7 +102,14 @@ jobs:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
 
-      - name: Extract metadata (tags, labels) for Docker
+      - name: Log in to GHCR
+        uses: docker/login-action@v3
+        with:
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Extract metadata for Docker
         id: meta
         uses: docker/metadata-action@v5
         with:
@@ -90,9 +117,17 @@ jobs:
           tags: |
             type=raw,value={{tag}}
 
-      - name: Create Multi-Arch Manifest
+      - name: Create Docker Hub Multi-Arch Manifest
         run: |
-          # Combine the architecture-specific images into a single manifest
-          docker buildx imagetools create -t ${{ steps.meta.outputs.tags }} \
+          docker buildx imagetools create \
+            -t ${{ steps.meta.outputs.tags }} \
             ${{ steps.meta.outputs.tags }}-arm64 \
             ${{ steps.meta.outputs.tags }}-amd64
+
+      - name: Create GHCR Multi-Arch Manifest
+        run: |
+          TAG=${{ github.event.release.tag_name }}
+          docker buildx imagetools create \
+            -t ${{ env.GHCR_IMAGE }}:${TAG} \
+            ${{ env.GHCR_IMAGE }}:${TAG}-arm64 \
+            ${{ env.GHCR_IMAGE }}:${TAG}-amd64