ci: also publish latest release branch containers

Author: ctron

.github/workflows/latest-release.yaml

@@ -7,25 +7,59 @@ on:
   push:
     branches:
       - main
+      - release/*
   workflow_dispatch:
 
 concurrency: latest-release
 
 env:
   IMAGE_NAME: trustd
-  IMAGE_TAG: latest
   OPENSHIFT_NAMESPACE: trustify-latest
   OPENSHIFT_SERVER: https://api.cluster.trustification.rocks:6443
   APP_NAME: staging
 
 jobs:
+  init:
+    runs-on: ubuntu-22.04
+    outputs:
+      version: ${{steps.version.outputs.version}}
+      prerelease: ${{steps.state.outputs.prerelease}}
+    steps:
+      - name: Evaluate pre-release state
+        id: state
+        env:
+          HEAD_REF: ${{github.head_ref}}
+        run: |
+          test -z "${HEAD_REF}" && (echo 'do-publish=true' >> $GITHUB_OUTPUT)
+          if [[ "${{ github.event.ref }}" =~ ^refs/tags/v[0-9]+\.[0-9]+\.[0-9]+$ ]]; then
+              echo release=true >> $GITHUB_OUTPUT
+              echo release=true >> $GITHUB_ENV
+          elif [[ "${{ github.event.ref }}" =~ ^refs/tags/v.*$ ]]; then
+              echo prerelease=true >> $GITHUB_OUTPUT
+              echo prerelease=true >> $GITHUB_ENV
+          fi
+      - name: Set version
+        id: version
+        run: |
+          VERSION=$(echo "${{ github.ref }}" | sed -e 's,.*/\(.*\),\1,')
+          [[ "${{ github.ref }}" == "refs/tags/"* ]] && VERSION=$(echo $VERSION | sed -e 's/^v//')
+          [[ "$VERSION" == "main" ]] && VERSION=latest
+          [[ "${{ github.ref }}" == "refs/heads/release/"* ]] && VERSION=$(echo "$VERSION" | sed -e 's/^release\///')
+          echo "version=$VERSION" >> $GITHUB_OUTPUT
+          echo "version=$VERSION" >> $GITHUB_ENV
+      - name: Show result
+        run: |
+          echo "Version: $version"
+          echo "Release: $release"
+          echo "Pre-release: $prerelease"
+
   build:
     uses: ./.github/workflows/build-binary.yaml
     with:
       version: latest
 
   publish:
-    needs: [ build ]
+    needs: [ init, build ]
     runs-on: ubuntu-22.04
 
     outputs:
@@ -54,7 +88,7 @@ jobs:
       - uses: ./.github/actions/build-container
         with:
           image_name: ${{ env.IMAGE_NAME }}
-          image_tag: ${{ env.IMAGE_TAG }}
+          image_tag: ${{ needs.init.outputs.version }}
 
       # Push to ghcr.io
 
@@ -63,7 +97,7 @@ jobs:
         uses: redhat-actions/push-to-registry@v2
         with:
           image: ${{ env.IMAGE_NAME }}
-          tags: ${{ env.IMAGE_TAG }}
+          tags: ${{ needs.init.outputs.version }}
           registry: ghcr.io/${{ github.repository_owner }}
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
@@ -77,7 +111,7 @@ jobs:
       run_ui_tests: true
 
   deploy:
-    if: ${{ github.repository == 'trustification/trustify' }}
+    if: ${{ (github.repository == 'trustification/trustify') && (needs.init.outputs.version == 'main') }}
     runs-on: ubuntu-22.04
     needs:
       - publish