Formal release process

.github/workflows/release.yml

@@ -0,0 +1,21 @@
+name: Release
+on:
+  release:
+    types: [published]
+jobs:
+  push:
+    name: Push release tag
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Install bazelisk
+        run: curl -L "https://github.com/bazelbuild/bazelisk/releases/download/v1.7.4/bazelisk-linux-amd64" | install -D /dev/stdin "${GITHUB_WORKSPACE}/bin/bazel"
+      - uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.CR_PAT }}
+      - run: bazel run //cmd/kipp:push
+        env:
+          GIT_COMMIT: ${{ github.sha }}
+          GIT_REF: ${{ github.event.release.tag_name }}

.github/workflows/test.yml

@@ -0,0 +1,16 @@
+name: Test
+on: [push]
+jobs:
+  test:
+    name: Test
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v2
+      - name: Install bazelisk
+        run: curl -L "https://github.com/bazelbuild/bazelisk/releases/download/v1.7.4/bazelisk-linux-amd64" | install -D /dev/stdin "${GITHUB_WORKSPACE}/bin/bazel"
+      - uses: docker/login-action@v1
+        with:
+          registry: ghcr.io
+          username: ${{ github.repository_owner }}
+          password: ${{ secrets.CR_PAT }}
+      - run: bazel test //...

cmd/kipp/BUILD.bazel

@@ -33,20 +33,20 @@ go_image(
 load("@io_bazel_rules_docker//docker:docker.bzl", "docker_bundle")
 
 docker_bundle(
-    name = "kipp_bundle",
+    name = "bundle",
     images = {
         "index.docker.io/uhthomas/kipp:latest": ":kipp",
-        "index.docker.io/uhthomas/kipp:{STABLE_GIT_COMMIT}": ":kipp",
+        "index.docker.io/uhthomas/kipp:{STABLE_GIT_REF}": ":kipp",
         "ghcr.io/uhthomas/kipp:latest": ":kipp",
-        "ghcr.io/uhthomas/kipp:{STABLE_GIT_COMMIT}": ":kipp",
+        "ghcr.io/uhthomas/kipp:{STABLE_GIT_REF}": ":kipp",
     },
 )
 
 load("@io_bazel_rules_docker//contrib:push-all.bzl", "docker_push")
 
 docker_push(
     name = "push",
-    bundle = "kipp_bundle",
+    bundle = "bundle",
     # Pushing layers concurrently sometimes fails.
     # See GitHub support ticket 885486.
     sequential = True,