From 755e2d77ebc1afb6d22bcd4615fe0b70a0213b9f Mon Sep 17 00:00:00 2001
From: Toddy Mladenov <toddysm@gmail.com>
Date: Tue, 2 Jun 2026 21:59:52 -0700
Subject: [PATCH] Add mirror workflow for openjdk:27-ea-slim into
 quarantine/openjdk

---
 .github/workflows/mirror-openjdk.yml | 41 ++++++++++++++++++++++++++++
 1 file changed, 41 insertions(+)
 create mode 100644 .github/workflows/mirror-openjdk.yml

diff --git a/.github/workflows/mirror-openjdk.yml b/.github/workflows/mirror-openjdk.yml
new file mode 100644
index 0000000..eff5a85
--- /dev/null
+++ b/.github/workflows/mirror-openjdk.yml
@@ -0,0 +1,41 @@
+# Mirror openjdk:27-ea-slim from Docker Hub into GHCR as quarantine/openjdk.
+#
+# This caller only defines triggers and the image-specific inputs; the actual
+# digest-check-and-copy logic lives in the reusable _mirror-image.yml workflow.
+#
+# Naming convention: "mirror-<image>.yml" for image mirror workflows, kept
+# separate from "build-<app>.yml" build workflows. See
+# docs/contributing/workflow-naming.md.
+name: mirror / quarantine/openjdk
+
+on:
+  # Daily upstream check at 06:00 UTC.
+  schedule:
+    - cron: "0 6 * * *"
+  # Manual run, with an optional force copy.
+  workflow_dispatch:
+    inputs:
+      force:
+        description: "Copy even when the source and destination digests match."
+        required: false
+        default: false
+        type: boolean
+
+# Avoid overlapping runs for this specific image mirror.
+concurrency:
+  group: mirror-quarantine-openjdk
+  cancel-in-progress: false
+
+permissions:
+  contents: read
+  packages: write
+
+jobs:
+  mirror-openjdk:
+    uses: ./.github/workflows/_mirror-image.yml
+    with:
+      source_image: docker.io/library/openjdk
+      source_tag: 27-ea-slim
+      dest_image: ghcr.io/toddysm/quarantine/openjdk
+      dest_tag: 27-ea-slim
+      force: ${{ github.event_name == 'workflow_dispatch' && inputs.force || false }}