feat: add concurrency control to workflows

Author: skunxicat

.github/workflows/build-and-release.yml

@@ -14,6 +14,10 @@ permissions:
   issues: write
   pull-requests: write
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build:
     runs-on: ubuntu-latest
@@ -78,8 +82,6 @@ jobs:
           # Build and push all variants
           make push VERSION="$VERSION" REGISTRY="ghcr.io/${{ github.repository_owner }}"
         shell: bash
-      - name: Log in to GHCR
-        run: echo "${{ secrets.GHCR_PAT }}" | docker login ghcr.io -u skunxicat --password-stdin
       - name: Create release
         if: env.SHOULD_RELEASE == 'true'
         run: npx semantic-release

.github/workflows/build-base.yml

@@ -15,6 +15,10 @@ on:
       - 'runtime/**'
       - 'task/handler.sh'
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build-base:
     runs-on: ubuntu-latest
@@ -33,6 +37,13 @@ jobs:
 
       - name: Build and push base
         run: |
-          ./build --platform linux/arm64 --tag ghcr.io/${{ github.repository_owner }}/lambda-shell-runtime --push base
+          docker buildx build \
+            --platform linux/arm64 \
+            --provenance=false \
+            --secret id=github_token,env=GITHUB_TOKEN \
+            --target base \
+            --tag ghcr.io/${{ github.repository_owner }}/lambda-shell-runtime:base \
+            --push \
+            .
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/build-installers.yml

@@ -11,6 +11,10 @@ on:
     paths:
       - 'Dockerfile'
 
+concurrency:
+  group: ${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build-installers:
     runs-on: ubuntu-latest

build

@@ -41,7 +41,7 @@ for VARIANT in $VARIANTS; do
   DOCKERFILE="./Dockerfile"
   TARGET="$VARIANT"
 
-  [ "$VARIANT" = "base" ] && TARGET=""
+  [ "$VARIANT" = "base" ] && TARGET="base"
 
   echo "Building $VARIANT ($DOCKERFILE) with platform $PLATFORM..."