Update release.yml

Signed-off-by: Jan Kowalleck <jan.kowalleck@gmail.com>

Author: jkowalleck

.github/workflows/release.yml

@@ -170,6 +170,7 @@ jobs:
     steps:
       - name: lowercase image tags
         run: |
+          set -uex
           echo "DOCKERHUB_REPO=${DOCKERHUB_REPO@L}" >> "${GITHUB_ENV}"
           echo "GHCR_REPO=${GHCR_REPO@L}" >> "${GITHUB_ENV}"
       - name: Checkout code (${{ env.TAG }})
@@ -192,12 +193,12 @@ jobs:
           docker build -f Dockerfile
           --label "org.opencontainers.image.source=${GITHUB_SERVER_URL}/${GITHUB_REPOSITORY}"
           --label "org.opencontainers.image.revision=${GITHUB_SHA}"
-          --label 'org.opencontainers.image.version=${VERSION}'
+          --label "org.opencontainers.image.version=${VERSION}"
           --build-arg "VERSION=${VERSION}"
-          -t "${DOCKERHUB_REPO}:${VERSION}"
-          -t "${DOCKERHUB_REPO}:latest"
-          -t "${GHCR_REPO|:${VERSION}"
-          -t "${GHCR_REPO}:latest"
+          -t "$DOCKERHUB_REPO:$VERSION"
+          -t "$DOCKERHUB_REPO:latest"
+          -t "$GHCR_REPO:$VERSION"
+          -t "$GHCR_REPO:latest"
           .
       - name: Build own SBoM (XML)
         run: >
@@ -212,7 +213,7 @@ jobs:
           environment
           -vvv
           --output-format JSON
-          > "$REPORTS_DIR/$ARTIFACT_DOCKER_SBOM.bom.json"
+          > "${REPORTS_DIR}/${ARTIFACT_DOCKER_SBOM}.bom.json"
       - name: Artifact reports
         if: ${{ ! cancelled() }}
         # see https://github.com/actions/upload-artifact