Split into two workflows: build (push/PR/dispatch) and scheduled-update (daily version check)

.github/workflows/build.yaml

@@ -9,47 +9,27 @@ on:
     paths:
       - .github/workflows/build.yaml
       - build/*
-  schedule:
-    - cron: '0 6 * * *'
   workflow_dispatch:
 
 env:
   GHCR_REPO: ghcr.io/trent-maetzold/protonmail-bridge
-  PLATFORMS: linux/amd64,linux/arm64/v8,linux/arm/v7,linux/riscv64
 
 jobs:
-  version-check:
+  resolve-version:
     runs-on: ubuntu-latest
     outputs:
-      version: ${{ steps.check.outputs.version }}
-      build_needed: ${{ steps.check.outputs.build_needed }}
+      version: ${{ steps.resolve.outputs.version }}
     steps:
       - name: Get latest upstream release
-        id: check
+        id: resolve
         run: |
           latest=$(curl -s https://api.github.com/repos/ProtonMail/proton-bridge/releases/latest | jq -r '.tag_name')
-          echo "Latest upstream: $latest"
           echo "version=$latest" >> $GITHUB_OUTPUT
 
-          if [[ "${{ github.event_name }}" == "schedule" ]]; then
-            # Check if we already have this version in GHCR
-            token=$(curl -s "https://ghcr.io/token?scope=repository:trent-maetzold/protonmail-bridge:pull" | jq -r '.token')
-            tags=$(curl -s -H "Authorization: Bearer $token" "https://ghcr.io/v2/trent-maetzold/protonmail-bridge/tags/list" | jq -r '.tags[]?' 2>/dev/null || echo "")
-            if echo "$tags" | grep -qx "${latest}-build"; then
-              echo "Version ${latest} already built"
-              echo "build_needed=false" >> $GITHUB_OUTPUT
-            else
-              echo "New version ${latest} detected"
-              echo "build_needed=true" >> $GITHUB_OUTPUT
-            fi
-          else
-            echo "build_needed=true" >> $GITHUB_OUTPUT
-          fi
-
   test:
     runs-on: ubuntu-latest
-    needs: version-check
-    if: github.event_name == 'pull_request' || (github.event_name == 'push' && github.ref != 'refs/heads/master')
+    needs: resolve-version
+    if: github.event_name == 'pull_request'
     steps:
       - name: Checkout
         uses: actions/checkout@v4
@@ -81,7 +61,7 @@ jobs:
           tags: "${{ env.GHCR_REPO }}:dev-${{ github.ref_name }}"
           push: true
           build-args: |
-            version=${{ needs.version-check.outputs.version }}
+            version=${{ needs.resolve-version.outputs.version }}
 
       - name: Run Trivy vulnerability scan
         uses: aquasecurity/trivy-action@0.30.0
@@ -99,14 +79,8 @@ jobs:
 
   build:
     runs-on: ubuntu-latest
-    needs: version-check
-    if: |
-      (github.event_name != 'pull_request') &&
-      (
-        (github.event_name == 'push' && github.ref == 'refs/heads/master') ||
-        (github.event_name == 'workflow_dispatch') ||
-        (github.event_name == 'schedule' && needs.version-check.outputs.build_needed == 'true')
-      )
+    needs: resolve-version
+    if: github.event_name == 'push' || github.event_name == 'workflow_dispatch'
     strategy:
       fail-fast: false
       matrix:
@@ -155,7 +129,7 @@ jobs:
           provenance: false
           sbom: false
           build-args: |
-            version=${{ needs.version-check.outputs.version }}
+            version=${{ needs.resolve-version.outputs.version }}
 
       - name: Export digest
         run: |
@@ -174,7 +148,7 @@ jobs:
   merge:
     runs-on: ubuntu-latest
     needs:
-      - version-check
+      - resolve-version
       - build
     steps:
       - name: Download digests
@@ -202,7 +176,7 @@ jobs:
         with:
           images: ${{ env.GHCR_REPO }}
           tags: |
-            type=raw,enable=true,value=${{ needs.version-check.outputs.version }}-build
+            type=raw,enable=true,value=${{ needs.resolve-version.outputs.version }}-build
             type=raw,enable=true,value=build
             type=raw,enable=true,value=latest
 
@@ -215,7 +189,7 @@ jobs:
       - name: Run Trivy vulnerability scan
         uses: aquasecurity/trivy-action@0.30.0
         with:
-          image-ref: "${{ env.GHCR_REPO }}:${{ needs.version-check.outputs.version }}-build"
+          image-ref: "${{ env.GHCR_REPO }}:${{ needs.resolve-version.outputs.version }}-build"
           format: 'sarif'
           exit-code: 0
           severity: 'CRITICAL,HIGH'
@@ -228,4 +202,4 @@ jobs:
 
       - name: Inspect image
         run: |
-          docker buildx imagetools inspect ${{ env.GHCR_REPO }}:${{ needs.version-check.outputs.version }}-build
+          docker buildx imagetools inspect ${{ env.GHCR_REPO }}:${{ needs.resolve-version.outputs.version }}-build