ci: enhance container workflow with metadata action and tag improvements

Author: DeltaLaboratory

.github/workflows/container.yml

@@ -5,42 +5,52 @@ on:
     branches:
       - main
     tags:
-      - v*
+      - 'v*.*.*'
+
+permissions:
+  contents: read
+  packages: write
 
 jobs:
   build:
     runs-on: ubuntu-latest
     steps:
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
+
       - name: Login to GitHub Container Registry
         uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
           password: ${{ secrets.GITHUB_TOKEN }}
-      - if: "startsWith(github.ref, 'refs/tags/v')"
-        name: build container (release)
-        uses: docker/build-push-action@v6
+
+      - name: Extract Metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
         with:
-          push: true
-          platforms: linux/amd64,linux/arm64
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
+          images: ghcr.io/deltalaboratory/postgres-backup
           tags: |
-            ghcr.io/deltalaboratory/postgres-backup:latest
-            ghcr.io/deltalaboratory/postgres-backup:${{ github.ref_name }}
-            ghcr.io/deltalaboratory/postgres-backup:${{ github.sha }}
-      - if: "!startsWith(github.ref, 'refs/tags/v')"
-        name: build container (development)
+            type=raw,value=latest,enable=${{ startsWith(github.ref, 'refs/tags/v') }} # 'latest' tag only for versioned releases
+            type=raw,value=development,enable=${{ github.ref == 'refs/heads/main' }} # 'development' tag for main branch
+            type=semver,pattern={{version}} # Semantic version tag (e.g., 1.0.0) from git tags
+            type=sha,prefix=,format=short # Short commit SHA tag for unique identification
+          labels: |
+            org.opencontainers.image.source=${{ github.event.repository.html_url }}
+            org.opencontainers.image.created=${{ github.event.repository.updated_at }}
+            org.opencontainers.image.revision=${{ github.sha }}
+
+      - name: Build and Push Docker Image
         uses: docker/build-push-action@v6
         with:
-          push: true
-          platforms: linux/amd64,linux/arm64
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-          tags: |
-            ghcr.io/deltalaboratory/postgres-backup:development
-            ghcr.io/deltalaboratory/postgres-backup:${{ github.sha }}
+          push: true # Push the image to the registry
+          platforms: linux/amd64,linux/arm64 # Build for multiple architectures
+          tags: ${{ steps.meta.outputs.tags }} # Use tags generated by metadata-action
+          labels: ${{ steps.meta.outputs.labels }} # Use labels generated by metadata-action
+          cache-from: type=gha # Pull cache from GitHub Actions cache
+          cache-to: type=gha,mode=max # Push cache to GitHub Actions cache (with max retention) 🚀