create server container image on new tag creation

Author: FreekBes

.github/workflows/release.yml

@@ -12,11 +12,8 @@ jobs:
   build-client-webpack:
     uses: ./.github/workflows/client-webpack.yml
 
-  build-server-image:
-    uses: ./.github/workflows/server-image.yml
-
   release:
-    needs: [build-client-webpack, build-server-image]
+    needs: build-client-webpack
     runs-on: ubuntu-latest
 
     steps:

.github/workflows/server-image.yml

@@ -3,6 +3,11 @@ name: Build and push back-end server Docker image
 on:
   workflow_call:
   workflow_dispatch:
+  # Run automatically when a new tag is created
+  push:
+    tags:
+      - 'v0.*' # alpha
+      - 'v1.*' # release
 
 env:
   REGISTRY: ghcr.io
@@ -47,9 +52,18 @@ jobs:
         images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
 
     - name: Build and push container image
+      id: push
       uses: docker/build-push-action@e551b19e49efd4e98792db7592c17c09b89db8d8 # v3.0.0
       with:
         file: ./server/Dockerfile
         context: ./server
         push: true
-        tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
+        tags: ${{ steps.meta.outputs.tags }}
+        labels: ${{ steps.meta.outputs.labels }}
+
+    - name: Generate artifact attestation
+      uses: actions/attest-build-provenance@v2
+      with:
+        subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+        subject-digest: ${{ steps.push.outputs.digest }}
+        push-to-registry: true