name: deploy

on:
  workflow_dispatch:
  push:
    branches: [main]
  pull_request_target:
    types: [labeled]
    branches: [main]

jobs:
  image:
    if: github.event.label.name == 'run-ci' || github.event_name != 'pull_request_target'
    permissions:
      contents: write
    uses: ./.github/workflows/build-image.yml
    with:
      distro: all
    secrets:
      R2_ACCESS_KEY_ID: ${{ secrets.R2_ACCESS_KEY_ID }}
      R2_SECRET_ACCESS_KEY: ${{ secrets.R2_SECRET_ACCESS_KEY }}
      R2_ENDPOINT: ${{ secrets.R2_ENDPOINT }}
      R2_BUCKET: ${{ secrets.R2_BUCKET }}