build-base-images.yml

name: Upload base images

on:
  schedule:
  - cron: "0 8 * * *"
  push:
    branches:
      - master
    tags:
      - 'v*'
  workflow_dispatch:

concurrency:
  group: ${{ github.workflow }}-${{ github.head_ref || github.run_id }}
  cancel-in-progress: true

env:
  REGISTRY: ghcr.io

jobs:
  sle-lang-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-lang
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-lang

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.lang
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-bci-lang.outputs.tags }}
          labels: ${{ steps.meta-bci-lang.outputs.labels }}

  sle-dotnet-image:
    if: false
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: qemu workaround
        run: docker run --rm --privileged multiarch/qemu-user-static --reset -p yes -c yes
      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-dotnet
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-dotnet
            ghcr.io/cyclonedx/bci-dotnet6

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.dotnet6
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-bci-dotnet.outputs.tags }}
          labels: ${{ steps.meta-bci-dotnet.outputs.labels }}

  cdxgen-dotnet-image:
    if: false
    runs-on: 'ubuntu-24.04'
    needs: sle-dotnet-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: qemu workaround
        run: docker run --rm --privileged multiarch/qemu-user-static --reset -p yes -c yes
      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-dotnet
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-dotnet
            ghcr.io/cyclonedx/cdxgen-dotnet6

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.dotnet6
          platforms: linux/amd64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-dotnet:v11,ghcr.io/cyclonedx/cdxgen-dotnet6:v11
          labels: ${{ steps.meta-cdxgen-dotnet.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.dotnet6
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-cdxgen-dotnet.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-dotnet.outputs.labels }}

  debian-dotnet6-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-debian-dotnet6
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/debian-dotnet6

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/debian/Dockerfile.dotnet6
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-debian-dotnet6.outputs.tags }}
          labels: ${{ steps.meta-debian-dotnet6.outputs.labels }}

  cdxgen-debian-dotnet6-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: debian-dotnet6-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-debian-dotnet6
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-debian-dotnet6

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/debian/Dockerfile.dotnet6
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-debian-dotnet6:v11
          labels: ${{ steps.meta-cdxgen-debian-dotnet6.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/debian/Dockerfile.dotnet6
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-debian-dotnet6.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-debian-dotnet6.outputs.labels }}


  sle-ruby25-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: qemu workaround
        run: docker run --rm --privileged multiarch/qemu-user-static --reset -p yes -c yes
      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-sle-ruby25
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/sle-ruby25

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.ruby25
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-sle-ruby25.outputs.tags }}
          labels: ${{ steps.meta-sle-ruby25.outputs.labels }}

  cdxgen-sle-ruby25-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-ruby25-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: qemu workaround
        run: docker run --rm --privileged multiarch/qemu-user-static --reset -p yes -c yes
      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-sle-ruby25
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-ruby25

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.ruby25
          platforms: linux/amd64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-ruby25:v11
          labels: ${{ steps.meta-cdxgen-sle-ruby25.outputs.labels }}

  debian-ruby33-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-debian-ruby33
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/debian-ruby33

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/debian/Dockerfile.ruby33
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-debian-ruby33.outputs.tags }}
          labels: ${{ steps.meta-debian-ruby33.outputs.labels }}

  cdxgen-debian-ruby33-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: debian-ruby33-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-debian-ruby33
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-debian-ruby33

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/debian/Dockerfile.ruby33
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-debian-ruby33:v11
          labels: ${{ steps.meta-cdxgen-debian-ruby33.outputs.labels }}

  debian-ruby34-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-debian-ruby34
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/debian-ruby34

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/debian/Dockerfile.ruby34
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-debian-ruby34.outputs.tags }}
          labels: ${{ steps.meta-debian-ruby34.outputs.labels }}

  cdxgen-debian-ruby34-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: debian-ruby34-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-debian-ruby34
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-debian-ruby34

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/debian/Dockerfile.ruby34
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-debian-ruby34:v11
          labels: ${{ steps.meta-cdxgen-debian-ruby34.outputs.labels }}

  debian-ruby18-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-debian-ruby18
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/debian-ruby18

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/debian/Dockerfile.ruby18
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-debian-ruby18.outputs.tags }}
          labels: ${{ steps.meta-debian-ruby18.outputs.labels }}

  debian-ruby26-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4
      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3
      - name: qemu workaround
        run: docker run --rm --privileged multiarch/qemu-user-static --reset -p yes -c yes
      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-debian-ruby26
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/debian-ruby26

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/debian/Dockerfile.ruby26
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-debian-ruby26.outputs.tags }}
          labels: ${{ steps.meta-debian-ruby26.outputs.labels }}

  cdxgen-debian-ruby26-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: debian-ruby26-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-debian-ruby26
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-debian-ruby26

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/debian/Dockerfile.ruby26
          platforms: linux/amd64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-debian-ruby26:v11
          labels: ${{ steps.meta-cdxgen-debian-ruby26.outputs.labels }}

  sle-dotnet7-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-dotnet7
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-dotnet7

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.dotnet7
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-bci-dotnet7.outputs.tags }}
          labels: ${{ steps.meta-bci-dotnet7.outputs.labels }}

  cdxgen-dotnet7-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-dotnet7-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-dotnet7
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-dotnet7

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.dotnet7
          platforms: linux/amd64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-dotnet7:v11
          labels: ${{ steps.meta-cdxgen-dotnet7.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.dotnet7
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-cdxgen-dotnet7.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-dotnet7.outputs.labels }}

  sle-dotnet8-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-dotnet8
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-dotnet8

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.dotnet8
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-bci-dotnet8.outputs.tags }}
          labels: ${{ steps.meta-bci-dotnet8.outputs.labels }}

  cdxgen-dotnet8-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-dotnet8-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-dotnet8
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-dotnet8

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.dotnet8
          platforms: linux/amd64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-dotnet8:v11
          labels: ${{ steps.meta-cdxgen-dotnet8.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.dotnet8
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-cdxgen-dotnet8.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-dotnet8.outputs.labels }}

  debian-dotnet8-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-debian-dotnet8
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/debian-dotnet8

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/debian/Dockerfile.dotnet8
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-debian-dotnet8.outputs.tags }}
          labels: ${{ steps.meta-debian-dotnet8.outputs.labels }}

  cdxgen-debian-dotnet8-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: debian-dotnet8-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-debian-dotnet8
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-debian-dotnet8

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/debian/Dockerfile.dotnet8
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-debian-dotnet8:v11
          labels: ${{ steps.meta-cdxgen-debian-dotnet8.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/debian/Dockerfile.dotnet8
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-debian-dotnet8.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-debian-dotnet8.outputs.labels }}

  sle-dotnet9-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-dotnet9
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-dotnet9

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.dotnet9
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-bci-dotnet9.outputs.tags }}
          labels: ${{ steps.meta-bci-dotnet9.outputs.labels }}

  cdxgen-dotnet9-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-dotnet9-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-dotnet9
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-dotnet9

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.dotnet9
          platforms: linux/amd64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-dotnet9:v11
          labels: ${{ steps.meta-cdxgen-dotnet9.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.dotnet9
          platforms: linux/amd64
          push: true
          tags: ${{ steps.meta-cdxgen-dotnet9.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-dotnet9.outputs.labels }}

  debian-dotnet9-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-debian-dotnet9
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/debian-dotnet9

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/debian/Dockerfile.dotnet9
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-debian-dotnet9.outputs.tags }}
          labels: ${{ steps.meta-debian-dotnet9.outputs.labels }}

  cdxgen-debian-dotnet9-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: debian-dotnet8-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-debian-dotnet9
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-debian-dotnet9

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/debian/Dockerfile.dotnet9
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-debian-dotnet9:v11
          labels: ${{ steps.meta-cdxgen-debian-dotnet9.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/debian/Dockerfile.dotnet9
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-debian-dotnet9.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-debian-dotnet9.outputs.labels }}

  sle-java-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-java
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-java

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.java
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-bci-java.outputs.tags }}
          labels: ${{ steps.meta-bci-java.outputs.labels }}

  sle-java-slim-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-java-slim
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-java-slim

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.java-slim
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-bci-java-slim.outputs.tags }}
          labels: ${{ steps.meta-bci-java-slim.outputs.labels }}

  cdxgen-java-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-java-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-java
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-java
            ghcr.io/cyclonedx/cdxgen-java11

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.java
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-java:v11,ghcr.io/cyclonedx/cdxgen-java11:v11
          labels: ${{ steps.meta-cdxgen-java.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.java
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-java.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-java.outputs.labels }}

  cdxgen-java-slim-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-java-slim-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-java-slim
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-java-slim
            ghcr.io/cyclonedx/cdxgen-java11-slim

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.java-slim
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-java-slim:v11,ghcr.io/cyclonedx/cdxgen-java11-slim:v11
          labels: ${{ steps.meta-cdxgen-java-slim.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.java-slim
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-java-slim.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-java-slim.outputs.labels }}

  sle-node20-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-node20
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-node20

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.node20
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-bci-node20.outputs.tags }}
          labels: ${{ steps.meta-bci-node20.outputs.labels }}

  cdxgen-node20-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-node20-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-node20
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-node
            ghcr.io/cyclonedx/cdxgen-node20

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.node20
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-node:v11,ghcr.io/cyclonedx/cdxgen-node20:v11
          labels: ${{ steps.meta-cdxgen-node20.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.node20
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-node20.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-node20.outputs.labels }}

  sle-java17-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-java17
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-java17

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.java17
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-bci-java17.outputs.tags }}
          labels: ${{ steps.meta-bci-java17.outputs.labels }}

  sle-java17-slim-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-java17-slim
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-java17-slim

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.java17-slim
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-bci-java17-slim.outputs.tags }}
          labels: ${{ steps.meta-bci-java17-slim.outputs.labels }}

  cdxgen-java17-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-java17-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-java17
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-java17

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.java17
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-java17:v11
          labels: ${{ steps.meta-cdxgen-java17.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.java17
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-java17.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-java17.outputs.labels }}

  cdxgen-java17-slim-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-java17-slim-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-java17-slim
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-java17-slim

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.java17-slim
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-java17-slim:v11
          labels: ${{ steps.meta-cdxgen-java17-slim.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.java17-slim
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-java17-slim.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-java17-slim.outputs.labels }}

  cdxgen-python-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-lang-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-python
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-python
            ghcr.io/cyclonedx/cdxgen-python312

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.python
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-python:v11,ghcr.io/cyclonedx/cdxgen-python312:v11
          labels: ${{ steps.meta-cdxgen-python.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.python
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-python.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-python.outputs.labels }}

  sle-python311-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-python311
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-python311

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.python311
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-bci-python311.outputs.tags }}
          labels: ${{ steps.meta-bci-python311.outputs.labels }}

  cdxgen-python311-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-python311-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-python311
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-python311

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.python311
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-python311:v11
          labels: ${{ steps.meta-cdxgen-python311.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.python311
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-python311.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-python311.outputs.labels }}

  sle-python36-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-bci-python36
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/bci-python36

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/sle/Dockerfile.python36
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-bci-python36.outputs.tags }}
          labels: ${{ steps.meta-bci-python36.outputs.labels }}

  cdxgen-python36-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: sle-python36-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-python36
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-python36

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.python36
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-python36:v11
          labels: ${{ steps.meta-cdxgen-python36.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.python36
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-python36.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-python36.outputs.labels }}

  opensuse-lang-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-opensuse-lang
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/opensuse-lang

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/opensuse/Dockerfile.lang
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-opensuse-lang.outputs.tags }}
          labels: ${{ steps.meta-opensuse-lang.outputs.labels }}

  cdxgen-rolling-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: opensuse-lang-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-rolling
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-rolling

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.rolling
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-rolling:v11
          labels: ${{ steps.meta-cdxgen-rolling.outputs.labels }}

  opensuse-python310-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-opensuse-python310
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/opensuse-python310

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/opensuse/Dockerfile.python310
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-opensuse-python310.outputs.tags }}
          labels: ${{ steps.meta-opensuse-python310.outputs.labels }}

  cdxgen-python310-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: opensuse-python310-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-python310
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-python310

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.python310
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-python310:v11
          labels: ${{ steps.meta-cdxgen-python310.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.python310
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-python310.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-python310.outputs.labels }}

  opensuse-python39-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    permissions:
      contents: read
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-opensuse-python39
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/opensuse-python39

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        with:
          context: .
          file: ci/base-images/opensuse/Dockerfile.python39
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-opensuse-python39.outputs.tags }}
          labels: ${{ steps.meta-opensuse-python39.outputs.labels }}

  cdxgen-python39-image:
    if: github.repository == 'CycloneDX/cdxgen'
    runs-on: 'ubuntu-24.04'
    needs: opensuse-python39-image
    permissions:
      packages: write
    steps:
      - uses: actions/checkout@v4

      - name: Set up QEMU
        uses: docker/setup-qemu-action@v3
      - name: Set up Docker Buildx
        uses: docker/setup-buildx-action@v3

      - name: Log in to the Container registry
        uses: docker/login-action@v3
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}

      - name: Extract metadata (tags, labels) for Docker
        id: meta-cdxgen-python39
        uses: docker/metadata-action@v5
        with:
          images: |
            ghcr.io/cyclonedx/cdxgen-python39

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: github.ref == 'refs/heads/master'
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.python39
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ghcr.io/cyclonedx/cdxgen-python39:v11
          labels: ${{ steps.meta-cdxgen-python39.outputs.labels }}

      - name: Build and push Docker images
        uses: docker/build-push-action@v5
        if: startsWith(github.ref, 'refs/tags/')
        with:
          context: .
          file: ci/base-images/cdxgen/Dockerfile.python39
          platforms: linux/amd64,linux/arm64
          push: true
          tags: ${{ steps.meta-cdxgen-python39.outputs.tags }}
          labels: ${{ steps.meta-cdxgen-python39.outputs.labels }}