chore: allow docker_publish to skip tests and bump workflow version (#149)

Author: maiquanghiep

.github/workflows/ci.yml

@@ -5,9 +5,12 @@ on:
     branches:
       - '**'
 
+permissions:
+  contents: read
+      
 jobs:
   lint_test:
-    uses: babylonlabs-io/.github/.github/workflows/[email protected].3
+    uses: babylonlabs-io/.github/.github/workflows/[email protected].4
     with:
       go-version: '1.25'
       go-lint-version: 'v2.4.0'
@@ -19,7 +22,7 @@ jobs:
       gosec-args: "-exclude-generated -exclude-dir=itest -exclude-dir=testutil -exclude-dir=covenant-signer ./..."
 
   docker_pipeline:
-    uses: babylonlabs-io/.github/.github/workflows/[email protected].3
+    uses: babylonlabs-io/.github/.github/workflows/[email protected].4
     secrets: inherit
     with:
       publish: false
@@ -47,7 +50,7 @@ jobs:
         run: gosec ./...
 
   docker_pipeline_covenant_signer:
-    uses: babylonlabs-io/.github/.github/workflows/[email protected].3
+    uses: babylonlabs-io/.github/.github/workflows/[email protected].4
     secrets: inherit
     with:
       publish: false

.github/workflows/publish.yml

@@ -8,10 +8,20 @@ on:
     tags:
       - '*'
   workflow_dispatch:
+    inputs:
+      skip-lint-test:
+        description: "Skip tests"
+        required: false
+        type: boolean
+        default: false
+
+permissions:
+  contents: read
 
 jobs:
   lint_test:
-    uses: babylonlabs-io/.github/.github/workflows/[email protected]
+    uses: babylonlabs-io/.github/.github/workflows/[email protected]
+    if: ${{ !(github.event_name == 'workflow_dispatch' && inputs['skip-lint-test'] == true) }}
     with:
       go-version: '1.25'
       go-lint-version: 'v2.4.0'
@@ -23,8 +33,14 @@ jobs:
       gosec-args: "-exclude-generated -exclude-dir=itest -exclude-dir=testutil -exclude-dir=covenant-signer ./..."
 
   docker_pipeline:
+    # Always evaluate, but only proceed if:
+    # - skip is enabled, or lint_test succeeded (normal path)
+    if: ${{ always() && (
+            (github.event_name == 'workflow_dispatch' && inputs['skip-lint-test'] == true) ||
+            needs.lint_test.result == 'success'
+          )}}
     needs: ["lint_test"]
-    uses: babylonlabs-io/.github/.github/workflows/[email protected].3
+    uses: babylonlabs-io/.github/.github/workflows/[email protected].4
     secrets: inherit
     with:
       publish: true
@@ -58,7 +74,7 @@ jobs:
 
   docker_pipeline_covenant_signer:
     needs: ["go_sec_covenant_signer"]
-    uses: babylonlabs-io/.github/.github/workflows/[email protected].3
+    uses: babylonlabs-io/.github/.github/workflows/[email protected].4
     secrets: inherit
     with:
       publish: true