Semver tags (#82)

.github/workflows/release-branch.yml

@@ -0,0 +1,28 @@
+name: release-branch
+on:
+  push:
+    branches: [ main ]
+
+permissions:
+  contents: write
+  id-token: write
+
+jobs:
+  ci-readme:
+    uses: cloudposse/github-actions-workflows/.github/workflows/ci-readme.yml@main
+    with:
+      filter-mode: nofilter
+      suggestions: false
+
+  ci-codeowners:
+    uses: cloudposse/github-actions-workflows/.github/workflows/ci-codeowners.yml@main
+    with:
+      is_fork: false
+    secrets:
+      github_access_token: ${{ secrets.REPO_ACCESS_TOKEN }}
+
+  controller-release:
+    uses: cloudposse/github-actions-workflows/.github/workflows/controller-release.yml@main
+    needs: [ ci-readme, ci-codeowners ]
+    secrets:
+      github_access_token: ${{ secrets.REPO_ACCESS_TOKEN }}  # Required to trigger tag workflow

.github/workflows/tag-pushed.yml

@@ -0,0 +1,36 @@
+name: tag-pushed
+
+on:
+  push:
+    tags:
+      - 'v*'
+
+jobs:
+  ci-build-push:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Docker meta
+        id: meta
+        uses: docker/metadata-action@v4
+        with:
+          images: ${{ github.repository }}
+          tags: |
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+
+      - name: Login to DockerHub
+        uses: docker/login-action@v2
+        with:
+          username: ${{ secrets.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_PASSWORD }}
+
+      - name: Build and push
+        uses: docker/build-push-action@v4
+        with:
+          context: .
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}