Merge pull request #37 from rcwbr/36-tag-workflows-produce-images-ref…

…-commit-suffixes

fix: avoid commit suffixes on release tags

.github/settings.yml

@@ -21,7 +21,7 @@ rulesets:
           - "~ALL"
         exclude: []
     bypass_actors:
-      - actor_id: 1033419
+      - actor_id: 1033419 # release-it-docker-ci-release-it App ID
         actor_type: Integration
         bypass_mode: always
     rules:

.github/workflows/push-workflow.yaml

@@ -31,6 +31,7 @@ jobs:
         env:
           REGISTRY: ghcr.io/rcwbr/
           IMAGE_NAME: release-it-docker
+          GITHUB_REF_PROTECTED: ${{ github.ref_protected || github.ref_type == 'tag' }} # See https://github.com/orgs/community/discussions/142985
       -
         name: Docker Bake conventional-changelog
         uses: docker/[email protected]
@@ -43,6 +44,7 @@ jobs:
         env:
           REGISTRY: ghcr.io/rcwbr/
           IMAGE_NAME: release-it-docker-conventional-changelog
+          GITHUB_REF_PROTECTED: ${{ github.ref_protected || github.ref_type == 'tag' }} # See https://github.com/orgs/community/discussions/142985
   release-it-workflow:
     name: Release-it workflow
     # uses: rcwbr/release-it-gh-workflow/.github/workflows/[email protected] TODO use released ref