feat(ci): start using PAT

Author: jef

.github/workflows/nightly-release.yaml

@@ -31,8 +31,8 @@ jobs:
         uses: docker/login-action@v2
         with:
           registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
+          username: jef
+          password: ${{ secrets.DEPLOY_TOKEN }}
       - name: Extract metadata (tags, labels) for Docker
         id: docker_metadata
         uses: docker/metadata-action@v4

.github/workflows/publish.yaml

@@ -0,0 +1,31 @@
+name: Build, tag, and publish
+on:
+  push:
+    tags:
+      - 'v*'
+jobs:
+  release_build_tag_publish:
+    name: Create release
+    runs-on: ubuntu-latest
+    steps:
+      - name: Login to GitHub Container Registry
+        uses: docker/login-action@v2
+        with:
+          registry: ghcr.io
+          username: jef
+          password: ${{ secrets.DEPLOY_TOKEN }}
+      - name: Extract metadata (tags, labels) for Docker
+        id: docker_metadata
+        uses: docker/metadata-action@v4
+        with:
+          images: ghcr.io/${{ github.repository }}
+          tags: |
+            type=raw,value=latest
+            type=semver,pattern={{version}}
+      - name: Build and push Docker image
+        uses: docker/build-push-action@v3
+        with:
+          context: .
+          labels: ${{ steps.docker_metadata.outputs.labels }}
+          push: true
+          tags: ${{ steps.docker_metadata.outputs.tags }}

.github/workflows/release.yaml

@@ -14,32 +14,8 @@ jobs:
         uses: google-github-actions/release-please-action@v3
         id: release
         with:
-          token: ${{ secrets.GITHUB_TOKEN }}
+          token: ${{ secrets.DEPLOY_TOKEN }}
           release-type: node
           changelog-path: CHANGELOG.md
           package-name: streetmerchant
           changelog-types: '[{"type":"feat","section":"Features","hidden":false},{"type":"fix","section":"Bug Fixes","hidden":false},{"type":"chore","section":"Miscellaneous","hidden":false},{"type":"docs","section":"Documentation","hidden":false},{"type":"refactor","section":"Refactoring","hidden":false},{"type":"perf","section":"Performance","hidden":false},{"type":"test","section":"Tests","hidden":false}]'
-      - name: Login to GitHub Container Registry
-        if: steps.release.outputs.release_created == 'true'
-        uses: docker/login-action@v2
-        with:
-          registry: ghcr.io
-          username: ${{ github.actor }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-      - name: Extract metadata (tags, labels) for Docker
-        if: steps.release.outputs.release_created == 'true'
-        id: docker_metadata
-        uses: docker/metadata-action@v4
-        with:
-          images: ghcr.io/${{ github.repository }}
-          tags: |
-            type=raw,value=latest
-            type=raw,pattern=${{ steps.release.outputs.major }}.${{ steps.release.outputs.minor }}.${{ steps.release.outputs.patch }}
-      - name: Build and push Docker image
-        if: steps.release.outputs.release_created == 'true'
-        uses: docker/build-push-action@v3
-        with:
-          context: .
-          labels: ${{ steps.docker_metadata.outputs.labels }}
-          push: true
-          tags: ${{ steps.docker_metadata.outputs.tags }}