build-cert-bins.yaml

name: Build Certification Image
on:
    workflow_call:
        inputs:
            commit_hash:
                description: 'Upstream project-chip/connectedhomeip commit to build (defaults to the workflow trigger SHA)'
                required: false
                type: string
                default: ''
    workflow_dispatch:
        inputs:
            commit_hash:
                description: 'Upstream project-chip/connectedhomeip commit to build (defaults to the workflow trigger SHA)'
                required: false
                type: string
                default: ''
jobs:
    build-cert-bin:
        runs-on: ubuntu-24.04-arm
        steps:
            - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
            - name: Set up Docker Buildx
              uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4
            - name: Publish to Registry
              uses: elgohr/Publish-Docker-Github-Action@1c2f28ccd9476e8a936ac9a1f287405504c93304 # v5
              with:
                  name: connectedhomeip/chip-cert-bins
                  tags: ${{ inputs.commit_hash || github.sha }}
                  dockerfile: ./integrations/docker/images/chip-cert-bins/Dockerfile
                  username: ${{ secrets.CHIP_CERT_BINS_REGISTRY_USER }}
                  password: ${{ secrets.CHIP_CERT_BINS_REGISTRY_TOKEN }}
                  registry: docker.io
                  platforms: linux/arm64
                  buildargs: COMMITHASH=${{ inputs.commit_hash || github.sha }}
            - name: Notify Slack on Failure
              if: failure()
              uses: ./.github/actions/notify-slack-failure
              with:
                slack-webhook: ${{ secrets.SWTT_SLACK_WEBHOOK }}