Merge pull request #5 from gravitational/fred/fix-ci-cd-1 #1

	name: CD
	on:
	push:
	tags:
	- "v[0-9]+.[0-9]+.[0-9]+**"

	concurrency:
	group: "Only run one instance of CD for ${{ github.ref_name }}"

	jobs:
	cut-release:
	runs-on: ubuntu-latest
	permissions:
	contents: read
	packages: write
	steps:
	- name: Validate the release tag
	env:
	# This is copy/pasted from https://semver.org/#is-there-a-suggested-regular-expression-regex-to-check-a-semver-string
	SEMVER_TAG_REGEX: ^(?P<major>0\|[1-9]\d)\.(?P<minor>0\|[1-9]\d)\.(?P<patch>0\|[1-9]\d)(?:-(?P<prerelease>(?:0\|[1-9]\d\|\d[a-zA-Z-][0-9a-zA-Z-])(?:\.(?:0\|[1-9]\d\|\d[a-zA-Z-][0-9a-zA-Z-]))))?(?:\+(?P<buildmetadata>[0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$
	GIT_TAG: ${{ github.ref_name }}
	run: \|
	# Check if the extracted version is a valid semver
	if ! $(echo "$GIT_TAG" \| grep --perl-regexp --quiet "$SEMVER_TAG_REGEX"); then
	echo "Extracted version $GIT_TAG is not a valid semver" >&2
	exit 1
	fi
	- name: Checkout repo
	uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
	- name: Install Earthly
	uses: earthly/actions-setup@be3fe0c1f84e9776b5a184d21bf7a4a779ea2e6b # v1.0.8
	with:
	# renovate: earthly-version
	version: v0.8.4
	- name: Login to GitHub Container Registry
	uses: docker/login-action@343f7c4344506bcbf9b4de18042ae17996df046d # v3.0.0
	with:
	registry: ghcr.io
	username: ${{ github.actor }}
	password: ${{ secrets.GITHUB_TOKEN }}
	- name: Cut a new release for ${{ github.ref_name }}
	env:
	GIT_TAG: ${{ github.ref_name }}
	run: earthly -ci --push +release --GIT_TAG="$GIT_TAG"

Provide feedback