feat(ci): enhance Docker image tagging and release handling

Add support for 'release' events in GitHub Actions for tagging and publishing Docker images. Modify existing logic to generate additional versioned tags when a release is published, and update conditional checks to handle both 'push' and 'release' events across relevant steps, including login, build, and sign operations. Use a unified environment variable for managing Docker tags.

Author: obeone

.github/workflows/build-and-publish.yaml

@@ -4,7 +4,8 @@ on:
   push:
     branches:
       - main
-
+  release:
+    types: [published]
   workflow_dispatch:
   pull_request:
     types: [opened, synchronize, reopened, edited]
@@ -27,16 +28,38 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3 
 
+      - name: Determine tags
+        run: |
+          TAGS="ghcr.io/obeone/multi-registry-cache:latest,docker.io/obeoneorg/multi-registry-cache:latest"
+
+          if [[ "${{ github.event_name }}" == "release" ]]; then
+            VERSION=${{ github.event.release.tag_name }}
+            VERSION=${VERSION#v} # Remove 'v' prefix if present
+            MAJOR=$(echo $VERSION | cut -d. -f1)
+            MINOR=$(echo $VERSION | cut -d. -f2)
+            PATCH=$(echo $VERSION | cut -d. -f3)
+
+            TAGS="$TAGS,ghcr.io/obeone/multi-registry-cache:v$VERSION,ghcr.io/obeone/multi-registry-cache:$VERSION"
+            TAGS="$TAGS,ghcr.io/obeone/multi-registry-cache:v$MAJOR.$MINOR,ghcr.io/obeone/multi-registry-cache:$MAJOR.$MINOR"
+            TAGS="$TAGS,ghcr.io/obeone/multi-registry-cache:v$MAJOR,ghcr.io/obeone/multi-registry-cache:$MAJOR"
+
+            TAGS="$TAGS,docker.io/obeoneorg/multi-registry-cache:v$VERSION,docker.io/obeoneorg/multi-registry-cache:$VERSION"
+            TAGS="$TAGS,docker.io/obeoneorg/multi-registry-cache:v$MAJOR.$MINOR,docker.io/obeoneorg/multi-registry-cache:$MAJOR.$MINOR"
+            TAGS="$TAGS,docker.io/obeoneorg/multi-registry-cache:v$MAJOR,docker.io/obeoneorg/multi-registry-cache:$MAJOR"
+          fi
+
+          echo "DOCKER_TAGS=$TAGS" >> $GITHUB_ENV
+
       - name: Log in to GitHub Container Registry
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main' || github.event_name == 'release'
         uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Log in to Docker Hub
-        if: (github.event_name == 'push' || github.event_name == 'workflow_dispatch') && github.ref == 'refs/heads/main'
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main' || github.event_name == 'release'
         uses: docker/login-action@v3
         with:
           registry: docker.io
@@ -49,23 +72,22 @@ jobs:
         with:
           context: .
           file: ./docker/Dockerfile
-          push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' }}
+          push: ${{ github.event_name == 'push' && github.ref == 'refs/heads/main' || github.event_name == 'release' }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
-          tags: |
-            ghcr.io/obeone/multi-registry-cache:latest
-            docker.io/obeoneorg/multi-registry-cache:latest
+          tags: ${{ env.DOCKER_TAGS }}
           platforms: linux/amd64,linux/arm64,linux/arm/v8,linux/arm/v6,linux/arm/v7,linux/i386
 
       - name: Set up cosign
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main' || github.event_name == 'release'
         uses: sigstore/cosign-installer@v3
 
       - name: Sign the container image with cosign
-        if: github.event_name == 'push' && github.ref == 'refs/heads/main'
+        if: github.event_name == 'push' && github.ref == 'refs/heads/main' || github.event_name == 'release'
         run: |
-          cosign sign --yes ghcr.io/obeone/multi-registry-cache@${DIGEST}
-          cosign sign --yes docker.io/obeoneorg/multi-registry-cache@${DIGEST}
+          for tag in $(echo $DOCKER_TAGS | tr ',' '\n'); do
+            cosign sign --yes $tag@${DIGEST}
+          done
         env:
           COSIGN_EXPERIMENTAL: true
           DIGEST: ${{ steps.docker_build.outputs.digest }}