minor changes

.github/workflows/docker-image.yaml

@@ -1,36 +0,0 @@
-name: Publish Docker image
-
-on:
-  release:
-    types: [published]
-
-jobs:
-  push_to_registry:
-    name: Release docker image
-    runs-on: ubuntu-latest
-    steps:
-      - name: Check out the repo
-        uses: actions/checkout@v4
-
-      - name: Log in to Docker Hub
-        uses: docker/login-action@f4ef78c080cd8ba55a85445d5b36e214a81df20a
-        with:
-          registry: docker.io
-          username: ${{ secrets.DOCKERHUB_USERNAME }}
-          password: ${{ secrets.DOCKERHUB_TOKEN }}
-
-      - name: Extract metadata (tags, labels) for Docker
-        id: meta
-        uses: docker/metadata-action@9ec57ed1fcdbf14dcef7dfbe97b2010124a938b7
-        with:
-          images: ${{ vars.DOCKERHUB_REPO }}
-
-      - name: Build and push Docker image
-        uses: docker/build-push-action@3b5e8027fcad23fda98b2e3ac259d8d67585f671
-        with:
-          context: .
-          file: ./Dockerfile
-          push: true
-          build-args: GITHUB_REF=${{ github.ref_name }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}

.github/workflows/publish-to-docker.yaml

@@ -0,0 +1,49 @@
+name: Publish to Docker Hub
+
+# GitHub events that triggers the workflow:
+on:
+  release:
+    types:
+      - published
+  workflow_dispatch: # to make the workflow triggerable manually
+  
+jobs:
+  call_tests_workflow:
+    name: Test
+    uses: ./.github/workflows/test.yaml
+
+  push_to_registry:
+    name: Release docker image
+    runs-on: ubuntu-latest
+    steps:
+      - name: Check out the repo
+        uses: actions/checkout@v4
+
+      - name: Login to Docker Hub
+        uses: docker/login-action@v3
+        with:
+          username: ${{ vars.DOCKERHUB_USERNAME }}
+          password: ${{ secrets.DOCKERHUB_TOKEN }}
+
+      - name: Extract metadata (tags, labels) for Docker
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: rendercv/rendercv
+
+      - name: Build and push Docker image
+        id: push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          push: true
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
+
+      - name: Generate artifact attestation
+        uses: actions/attest-build-provenance@v2
+        with:
+          subject-name: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME}}
+          subject-digest: ${{ steps.push.outputs.digest }}
+          push-to-registry: true

.github/workflows/test.yaml

@@ -6,7 +6,7 @@ on:
     branches: ["main", "dev"]
   pull_request:
     branches: ["main", "dev"]
-  workflow_call: # to make the workflow triggerable from other workflows (publish.yaml)
+  workflow_call: # to make the workflow triggerable from other workflows (publish-to-pypi.yaml)
   workflow_dispatch: # to make the workflow triggerable manually
 
 # The workflow:

.github/workflows/update-files.yaml

@@ -2,7 +2,7 @@ name: Update files
 
 # GitHub events that triggers the workflow:
 on:
-  workflow_call: # to make the workflow triggerable from other workflows (publish.yaml)
+  workflow_call: # to make the workflow triggerable from other workflows (publish-to-pypi.yaml)
   workflow_dispatch: # to make the workflow triggerable manually
 
 jobs: