ci: add manual workflow to retag docker image by digest

Author: bvt123

.github/workflows/retag-docker.yaml

@@ -0,0 +1,63 @@
+name: Retag Docker Image
+
+on:
+  workflow_dispatch:
+    inputs:
+      source_digest:
+        description: "Source image digest (e.g. sha256:...)"
+        required: true
+        default: "sha256:8e3365b353614b2dfac36206e2b8a0ff97188c7b2958197fd5ed4451961b5d69"
+      target_tags:
+        description: "Comma-separated tags to update (e.g. altinity,latest)"
+        required: true
+        default: "altinity,latest"
+
+env:
+  REGISTRY: docker.io
+  IMAGE_NAME: altinity/transferia
+
+jobs:
+  retag:
+    runs-on: ubuntu-latest
+    permissions:
+      contents: read
+    steps:
+      - name: Validate inputs
+        shell: bash
+        run: |
+          set -euo pipefail
+          if [[ ! "${{ inputs.source_digest }}" =~ ^sha256:[a-f0-9]{64}$ ]]; then
+            echo "Invalid digest format: ${{ inputs.source_digest }}"
+            exit 1
+          fi
+          if [[ -z "${{ inputs.target_tags }}" ]]; then
+            echo "target_tags cannot be empty"
+            exit 1
+          fi
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+
+      - name: Retag digest
+        shell: bash
+        run: |
+          set -euo pipefail
+          IFS=',' read -ra TAGS <<< "${{ inputs.target_tags }}"
+          for tag in "${TAGS[@]}"; do
+            clean_tag="$(echo "$tag" | xargs)"
+            if [[ -z "$clean_tag" ]]; then
+              continue
+            fi
+            echo "Retagging ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ inputs.source_digest }} -> ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${clean_tag}"
+            docker buildx imagetools create \
+              --tag "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${clean_tag}" \
+              "${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}@${{ inputs.source_digest }}"
+          done
+