feat: rename stable container tag to latest

Author: NN708

.github/workflows/vib-build.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - 'dev'
+      - 'vision'
     tags:
       - '*'
   workflow_dispatch:
@@ -20,7 +21,7 @@ jobs:
     - name: Verify Base Image Integrity
       if: ${{ github.ref_type == 'tag' }}
       run:
-        gh attestation verify oci://ghcr.io/vanilla-os/pico:dev --owner Vanilla-OS
+        gh attestation verify oci://ghcr.io/vanilla-os/pico:latest --owner Vanilla-OS
       env:
         GH_TOKEN: ${{ github.token }}
 
@@ -44,9 +45,14 @@ jobs:
     - uses: actions/checkout@v6
 
     - name: Change tag in recipe.
-      if: ${{ github.ref_type == 'tag' }}
+      if: ${{ github.ref_type != 'tag' }}
       run: |
-        sed 's/ghcr.io\/vanilla-os\/pico:dev/ghcr.io\/vanilla-os\/pico:main/' -i recipe.yml
+        if [ -n "${{ github.base_ref }}" ]; then
+          TAG="${{ github.base_ref }}"
+        else
+          TAG="${{ github.ref_name }}"
+        fi
+        sed "s/ghcr.io\/vanilla-os\/pico:latest/ghcr.io\/vanilla-os\/pico:$TAG/" -i recipe.yml
 
     - uses: vanilla-os/vib-gh-action@v1.1.0
       with:
@@ -156,7 +162,7 @@ jobs:
     - name: Extra image tag release
       if: ${{ github.ref_type == 'tag' }}
       run: |
-        echo "EXTRA_TAG=raw,main" >> "$GITHUB_ENV"
+        echo "EXTRA_TAG=raw,latest" >> "$GITHUB_ENV"
 
     - name: Docker meta
       id: meta

README.md

@@ -18,5 +18,5 @@ podman image build -t vanillaos/core .
 All the image builds/pushes are attested for build provenance and integrity using the [attest-build-provenance`](https://github.com/actions/attest-build-provenance) action. The attestations can be verified [here](https://github.com/Vanilla-OS/core-image/attestations) or by having the latest version of [GitHub CLI](https://github.com/cli/cli/releases/latest) installed in your system. Then, execute the following command:
 
 ```sh
-gh attestation verify oci://ghcr.io/vanilla-os/core:main --owner Vanilla-OS
+gh attestation verify oci://ghcr.io/vanilla-os/core:latest --owner Vanilla-OS
 ```

recipe.yml

@@ -4,7 +4,7 @@ vibversion: 1.1.0
 
 stages:
 - id: build
-  base: ghcr.io/vanilla-os/pico:dev
+  base: ghcr.io/vanilla-os/pico:latest
   addincludes: true
   singlelayer: false
   labels: