ci(docker): Do not write to the registry cache in pull requests checks

Writing to the cache causes a permission problem when pull requests are created from a fork. Also, the cache should only be written to from main branch builds anyway. Signed-off-by: Martin Nonnenmacher <[email protected]>
eclipse-apoapsis · Dec 16, 2024 · 8511119 · 8511119
1 parent ca15038
commit 8511119
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/.github/workflows/docker-build.yml b/.github/workflows/docker-build.yml
@@ -131,6 +131,10 @@ jobs:
           type=sha
           type=raw,value=latest,enable={{ is_default_branch }}
 
+    - name: Set cache-to
+      id: set-cache-to
+      run: echo "cache_to=$([[ ${{ !env.IS_PR }} == 'true' ]] && echo 'type=registry,ref=${{ env.REGISTRY }}/${{ github.repository_owner }}/ort-server-${{ matrix.docker.image }}:cache,mode=max' || echo '')" >> $GITHUB_ENV
+
     - name: Build ${{ matrix.docker.image }} Image
       if: ${{ matrix.docker.dockerfile != '' }}
       uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6
@@ -142,7 +146,7 @@ jobs:
         tags: ${{ steps.meta-base.outputs.tags }}
         labels: ${{ steps.meta-base.outputs.labels }}
         cache-from: type=registry,ref=${{ env.REGISTRY }}/${{ github.repository_owner }}/ort-server-${{ matrix.docker.image }}:cache
-        cache-to: type=registry,ref=${{ env.REGISTRY }}/${{ github.repository_owner }}/ort-server-${{ matrix.docker.image }}:cache,mode=max
+        cache-to: ${{ steps.set-cache-to.output.cache-to }}
 
     - name: Extract Docker Metadata for ${{ matrix.docker.jibImage }} Image
       if: ${{ matrix.docker.task != '' }}