release.yaml

name: Release

on:
  push:
    tags:
      - 'v*'

jobs:
  build:
    uses: docker/github-builder/.github/workflows/build.yml@17bd7d64200cae4ba58ffc099934e8012ae320f2 # v1.10.0
    permissions:
      contents: read
      id-token: write
      packages: write
    with:
      platforms: linux/amd64,linux/arm64
      cache: true
      cache-mode: max
      output: image
      push: true
      sbom: true
      set-meta-annotations: true
      set-meta-labels: true
      meta-images: ghcr.io/${{ github.repository }}
      meta-tags: |
        type=semver,pattern={{version}}
        type=semver,pattern={{major}}.{{minor}}
        type=semver,pattern={{major}}
    secrets:
      registry-auths: |
        - registry: ghcr.io
          username: ${{ github.actor }}
          password: ${{ secrets.GITHUB_TOKEN }}