GitHub Actions 自动构建 Docker 镜像完全指南：从手动触发到定时检查与版本追踪

1
- name: 对比版本
2
  run: |
3
    OLD=$(cat .last_built_version)
4
    NEW=$(node -p "require('./source/package.json').version")
5
    if [ "$OLD" != "$NEW" ]; then
6
      echo "should_build=true" >> "$GITHUB_OUTPUT"
7
    fi

1
读取 package.json 版本 → 查 GHCR 上是否已有 v<version>
2
  ├── 有 → 跳过构建
3
  └── 无 → 触发构建

1
Unable to find reusable workflow

1
# ✅ 正确
2
build:
3
  needs: check
4
  if: needs.check.outputs.should_build == 'true'
5
  permissions:
6
    packages: write
7
  uses: ./.github/workflows/build.yml
8
  with:
9
    tag: latest
10

11
# ❌ 错误：不能有 runs-on 和 steps
12
build:
13
  runs-on: ubuntu-latest   # 报错
14
  # steps: ...             # 报错
15
  uses: ./.github/workflows/build.yml

1
build:
2
  permissions:
3
    contents: read
4
    packages: write    # 必须有，否则 build.yml 推镜像会失败
5
  uses: ./.github/workflows/build.yml

1
name: Check Version & Trigger Build
2

3
on:
4
  schedule:
5
    - cron: '0 3 * * *'       # UTC 03:00 = 北京 11:00
6
  workflow_dispatch:
7

8
concurrency:
9
  group: check-version
10
  cancel-in-progress: false
11

12
jobs:
13
  check:
14
    name: 检查 package.json 版本
15
    runs-on: ubuntu-latest
16
    permissions:
17
      contents: read
18
      packages: read
19
    outputs:
20
      version: ${{ steps.pkg.outputs.version }}
21
      should_build: ${{ steps.check.outputs.should_build }}
22

23
    steps:
24
      - name: 仅拉取 package.json
25
        uses: actions/checkout@v4
26
        with:
27
          repository: chiihero/Microsoft-Rewards-Script
28
          ref: V4-china
29
          path: source
30
          sparse-checkout: |
31
            package.json
32
          sparse-checkout-cone-mode: false
33

34
      - name: 读取版本号
35
        id: pkg
36
        shell: bash
37
        run: |
38
          VERSION=$(node -p "require('./source/package.json').version")
39
          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
40
          echo "Package version: ${VERSION}"
41

42
      - name: 检查 GHCR 是否已存在
43
        id: check
44
        shell: bash
45
        env:
46
          VERSION: ${{ steps.pkg.outputs.version }}
47
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
48
        run: |
49
          OWNER=$(echo "${GITHUB_REPOSITORY_OWNER}" | tr '[:upper:]' '[:lower:]')
50
          PKG_ORGS="/orgs/${OWNER}/packages/container/microsoft-rewards-script/versions"
51
          PKG_USERS="/users/${OWNER}/packages/container/microsoft-rewards-script/versions"
52

53
          # 个人账号走 /users/，组织账号走 /orgs/，两者都试
54
          if gh api "$PKG_ORGS" -H "Accept: application/vnd.github+json" 2>/dev/null \
55
               | grep -q "v${VERSION}" \
56
             || gh api "$PKG_USERS" -H "Accept: application/vnd.github+json" 2>/dev/null \
57
               | grep -q "v${VERSION}"; then
58
            echo "should_build=false" >> "$GITHUB_OUTPUT"
59
            echo "✅ 镜像 v${VERSION} 已存在，跳过构建"
60
          else
61
            echo "should_build=true" >> "$GITHUB_OUTPUT"
62
            echo "🆕 镜像 v${VERSION} 不存在，触发构建"
63
          fi
64

65
  build:
66
    name: 调用构建工作流
67
    needs: check
68
    if: needs.check.outputs.should_build == 'true'
69
    permissions:
70
      contents: read
71
      packages: write
72
    uses: ./.github/workflows/build.yml
73
    with:
74
      tag: latest

1
name: Build and Push Docker Image
2

3
on:
4
  workflow_dispatch:
5
    inputs:
6
      tag:
7
        description: '镜像标签'
8
        required: false
9
        default: 'latest'
10
        type: string
11
  workflow_call:
12
    inputs:
13
      tag:
14
        required: false
15
        type: string
16
        default: latest
17

18
jobs:
19
  build:
20
    runs-on: ubuntu-latest
21
    permissions:
22
      contents: read
23
      packages: write
24

25
    steps:
26
      - name: Checkout V4-china 分支源码
27
        uses: actions/checkout@v4
28
        with:
29
          repository: chiihero/Microsoft-Rewards-Script
30
          ref: V4-china
31
          path: source
32

33
      - name: 获取源码提交短 SHA
34
        id: source_sha
35
        run: echo "sha=$(git -C source rev-parse --short HEAD)" >> "$GITHUB_OUTPUT"
36

37
      - name: 读取 package.json 版本号
38
        id: pkg
39
        run: |
40
          VERSION=$(node -p "require('./source/package.json').version")
41
          echo "version=${VERSION}" >> "$GITHUB_OUTPUT"
42

43
      - name: 设置 Docker Buildx
44
        uses: docker/setup-buildx-action@v3
45

46
      - name: 登录 GHCR
47
        uses: docker/login-action@v3
48
        with:
49
          registry: ghcr.io
50
          username: ${{ github.actor }}
51
          password: ${{ secrets.GITHUB_TOKEN }}
52

53
      - name: 生成镜像引用
54
        id: image
55
        run: |
56
          OWNER=$(echo "${GITHUB_REPOSITORY_OWNER}" | tr '[:upper:]' '[:lower:]')
57
          echo "ref=ghcr.io/${OWNER}/microsoft-rewards-script" >> "$GITHUB_OUTPUT"
58

59
      - name: 构建并推送
60
        uses: docker/build-push-action@v6
61
        with:
62
          context: ./source
63
          file: ./source/Dockerfile
64
          push: true
65
          tags: |
66
            ${{ steps.image.outputs.ref }}:latest
67
            ${{ steps.image.outputs.ref }}:${{ steps.pkg.outputs.version }}
68
            ${{ steps.image.outputs.ref }}:v${{ steps.pkg.outputs.version }}
69
            ${{ steps.image.outputs.ref }}:sha-${{ steps.source_sha.outputs.sha }}
70
          labels: |
71
            org.opencontainers.image.source=https://github.com/chiihero/Microsoft-Rewards-Script
72
            org.opencontainers.image.revision=${{ steps.source_sha.outputs.sha }}
73
            org.opencontainers.image.version=${{ steps.pkg.outputs.version }}