k8s content image: Image from PR should not be tagged latest

[yuumasato]

Description:

• Do not tag images built from PRs as latest. Set action metadata input flavor latest=false
  • https://github.com/docker/metadata-action?tab=readme-ov-file#flavor-input
• Mention in the comment what commit was used to build.
  • This allows us to know whether the latest push to a PR was built already.

Rationale:

• The latest tag should be used on images built from merged changes.
  • Note that the latest tag is assigned to the same image that has a PR number tag (This won't be noticeable if a PR was merged and no PR was updated after that).
  • https://github.com/ComplianceAsCode/content/pkgs/container/k8scontent/versions
• From the comment in a PR we cannot know what commit was used to build the image.

Review Hints:

• Unfortunately the PR needs to merged to have effect
• Reference
  • https://docs.github.com/en/webhooks/webhook-events-and-payloads#workflow_run

[github-actions]

Start a new ephemeral environment with changes proposed in this pull request:

Fedora Environment

Oracle Linux 8 Environment

[codeclimate]

Code Climate has analyzed commit 4293530 and detected 0 issues on this pull request.

The test coverage on the diff in this pull request is 100.0% (50% is the threshold).

This pull request will bring the total coverage in the repository to 59.8% (0.0% change).

View more on Code Climate.

[github-actions]

🤖 A k8s content image for this PR is available at:
ghcr.io/complianceascode/k8scontent:11643

Click here to see how to deploy it

If you alread have Compliance Operator deployed:
utils/build_ds_container.py -i ghcr.io/complianceascode/k8scontent:11643

Otherwise deploy the content and operator together by checking out ComplianceAsCode/compliance-operator and:
CONTENT_IMAGE=ghcr.io/complianceascode/k8scontent:11643 make deploy-local

[yuumasato]

The latest tag is still being added to images from PRs.
But the the commit sha is being printed correctly:
#11638 (comment)

[rhmdnd]

The latest tag is still being added to images from PRs. But the the commit sha is being printed correctly: #11638 (comment)

I think @Vincent056 is working on something to fix the deployment using latest.

[yuumasato]

@Vincent056 It seems that the latest is being correctly added now. Did you do something to fix it?