ci: build and push a tagged image on release tags

Dimitrios Gogosrequested to merge
develop into main

build-and-push only ran on main and develop, so pushing a release tag (e.g. 2.0.0) produced no image.

  • Add a rule for semver tags (^\d+\.\d+\.\d+$), the same as OEG's release pipeline.
  • Tag pipelines push $CI_REGISTRY_IMAGE:<tag>. Branch pipelines still push ci-<ref>-<sha>.
  • Tags such as v2.0.0-release still don't build.

The type, lint and test jobs already run on tag pipelines, so the image is pushed only if they pass.

Merge request reports