Update docker/login-action digest to abd2ef4

Reviewed-on: #14

.gitea/workflows/cron.yaml

@@ -0,0 +1 @@
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

.gitea/workflows/docker-build.yaml

@@ -1,43 +1,76 @@
 name: Docker Build and Push
 
 on:
-  pull_request:
-    branches: [master]
   push:
-    branches: [master]
+    branches: [master, main]
+  pull_request:
   schedule:
-    - cron: '0 0 * * *'
+    - cron: '30 3 * * 3'
 
 jobs:
-  build:
+  lint:
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout
-        uses: actions/checkout@v6
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: hadolint/hadolint-action@2332a7b74a6de0dda2e2221d575162eba76ba5e5 # v3.3.0
+        with:
+          dockerfile: Dockerfile
+          failure-threshold: error
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v4
+  build:
+    runs-on: ubuntu-latest
+    needs: lint
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - name: Build image
+        run: docker build -t ci-image:${{ github.sha }} .
+      - name: Save image
+        run: docker save ci-image:${{ github.sha }} -o image.tar
+      - uses: ChristopherHX/gitea-upload-artifact@62ac910c5d3dfa85c7cb2df15afe2e342b2407c2 # main
+        with:
+          name: docker-image
+          path: image.tar
 
-      - name: Login to Docker Hub
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@v4
+  test:
+    runs-on: ubuntu-latest
+    needs: build
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+      - uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7 # main
+        with:
+          name: docker-image
+      - name: Load image
+        run: docker load < image.tar
+      - name: Run tests
+        run: bash tests/test.sh ci-image:${{ github.sha }}
+
+  push:
+    runs-on: ubuntu-latest
+    needs: test
+    if: github.event_name != 'pull_request'
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          fetch-depth: 0
+      - uses: ChristopherHX/gitea-download-artifact@75635f32b4c1c41c4b3d64e8f85210112ed4c9c7 # main
+        with:
+          name: docker-image
+      - name: Load image
+        run: docker load < image.tar
+      - uses: docker/login-action@abd2ef45e78c5afb21d64d4ca52ee8550d9572c7 # v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Docker metadata
-        id: meta
-        uses: docker/metadata-action@v6
-        with:
-          images: jcabillot/putty
-          tags: |
-            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/master' }}
-
-      - name: Build and push
-        uses: docker/build-push-action@v7
-        with:
-          context: .
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          pull: true
+      - name: Tag and push
+        run: |
+          docker tag ci-image:${{ github.sha }} jcabillot/putty:latest
+          docker push jcabillot/putty:latest
+      - name: Bump version and push tag
+        if: github.event_name == 'push'
+        uses: anothrNick/github-tag-action@4ed44965e0db8dab2b466a16da04aec3cc312fd8 # v1.75.0
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          DEFAULT_BUMP: patch
+          RELEASE_BRANCHES: master
+          WITH_V: true
+          GIT_API_TAGGING: false

.gitea/workflows/main.yaml

@@ -0,0 +1 @@
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

.gitea/workflows/pr.yaml

@@ -0,0 +1 @@
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

.gitea/workflows/tag.yaml

@@ -0,0 +1 @@
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

Dockerfile

@@ -1,4 +1,5 @@
-FROM alpine:3.23
+FROM alpine:3.24
 LABEL maintainer="Cabillot Julien <dockerimages@cabillot.eu>"
 
+# hadolint ignore=DL3018
 RUN apk add --no-cache putty

tests/test.sh

@@ -0,0 +1,45 @@
+#!/bin/bash
+set -euo pipefail
+
+IMAGE="$1"
+FAILED=0
+PASSED=0
+
+assert_eq() {
+  local desc="$1" expected="$2" actual="$3"
+  if [ "$expected" = "$actual" ]; then
+    echo "PASS: $desc"
+    PASSED=$((PASSED + 1))
+  else
+    echo "FAIL: $desc (expected $expected, got $actual)"
+    FAILED=$((FAILED + 1))
+  fi
+}
+
+TMPDIR="$(mktemp -d)"
+trap 'rm -rf "$TMPDIR"' EXIT
+
+docker run --rm "$IMAGE" putty --help > "$TMPDIR/output" 2>&1 || true
+
+if [ -s "$TMPDIR/output" ]; then
+  echo "PASS: putty --help produces output"
+  PASSED=$((PASSED + 1))
+else
+  echo "FAIL: putty --help produces no output"
+  FAILED=$((FAILED + 1))
+fi
+
+docker run --rm "$IMAGE" puttygen --version > "$TMPDIR/output" 2>&1
+if grep -qiE "putty|release|version" "$TMPDIR/output"; then
+  echo "PASS: puttygen produces recognizable output"
+  PASSED=$((PASSED + 1))
+else
+  echo "FAIL: puttygen output unrecognized"
+  FAILED=$((FAILED + 1))
+fi
+
+echo ""
+echo "$PASSED/$((PASSED + FAILED)) tests passed"
+if [ "$FAILED" -gt 0 ]; then
+  exit 1
+fi