Publish tagged releases

.github/workflows/build.yml

@@ -1,4 +1,5 @@
 name: build
+
 on:
   push:
 
@@ -54,22 +55,3 @@ jobs:
 
     - name: Run isort
       run: pipenv run isort --check-only .
-
-  publish:
-    needs:
-    - test
-    - lint
-    if: github.ref == 'refs/heads/master'
-    runs-on: ubuntu-latest
-    steps:
-    - name: Checkout code
-      uses: actions/checkout@v4
-
-    - name: Login to GHCR
-      run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
-
-    - name: Build Docker image
-      run: docker build -t ghcr.io/${{ github.repository }}:latest .
-
-    - name: Push image to GHCR
-      run: docker push ghcr.io/${{ github.repository }}:latest

.github/workflows/publish.yml

@@ -0,0 +1,27 @@
+name: publish
+
+on:
+  release:
+    types: [published]
+
+jobs:
+  publish:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Login to GHCR
+        run: echo ${{ secrets.GITHUB_TOKEN }} | docker login ghcr.io -u ${{ github.actor }} --password-stdin
+
+      - name: Build Docker image
+        run: docker build -t ghcr.io/${{ github.repository }}:${{ github.event.release.tag_name }} .
+
+      - name: Tag image as latest
+        run: docker tag ghcr.io/${{ github.repository }}:${{ github.event.release.tag_name }} ghcr.io/${{ github.repository }}:latest
+
+      - name: Push versioned tag to GHCR
+        run: docker push ghcr.io/${{ github.repository }}:${{ github.event.release.tag_name }}
+
+      - name: Push latest tag to GHCR
+        run: docker push ghcr.io/${{ github.repository }}:latest

.github/workflows/release.yml

@@ -0,0 +1,16 @@
+name: release
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Create GitHub Release
+        uses: ncipollo/release-action@v1