mirror of
https://github.com/MBombeck/HealthLog.git
synced 2026-11-08 20:42:43 +00:00
The Build & Publish Docker Image workflow fired twice on every release. The squash-merge to `main` and the `v*` tag push landed within a second of each other and each kicked off its own run against the same SHA. Both runs finished green and pushed overlapping tag sets — the main-branch run added the `latest` alias, the tag run added the semver tags — but the duplication doubled GHCR CI minutes per release with no operational benefit. Drop the `push.branches: [main]` trigger so only `v*` tag pushes fire the build on a release. Tighten the `latest` raw-tag rule in docker/metadata-action so it enables on stable release tags (`refs/tags/v*` without a pre-release suffix) rather than the `is_default_branch` condition (false on tag refs). Net result: a release tag pushes a single multi-arch image carrying both the semver tags and the `latest` alias in one run, halving the CI minutes per release. PR + workflow_dispatch triggers are preserved so pre-merge validation and manual reruns still build.