chore: publish artifacts on github release (#369)

Signed-off-by: Guillaume Belanger <[email protected]>

.github/workflows/main.yml

@@ -3,7 +3,6 @@ name: Main workflow
 permissions:
   contents: read
   packages: write
-  security-events: write
 
 on:
   pull_request:
@@ -27,24 +26,6 @@ jobs:
   rock-build:
     needs: [go-unit-test, go-vet, go-lint]
     uses: ./.github/workflows/rock-build.yaml
-  rock-scan:
-    if: github.ref_name == 'main'
-    needs: [rock-build]
-    uses: ./.github/workflows/rock-scan.yaml
   integration-tests:
     needs: [go-unit-test, go-vet, go-lint, rock-build]
     uses: ./.github/workflows/integration-tests.yaml
-  rock-publish:
-    if: github.ref_name == 'main'
-    needs: [rock-build]
-    uses: ./.github/workflows/rock-publish.yaml
-    secrets: inherit
-  snap-build:
-    if: github.ref_name == 'main'
-    needs: [go-unit-test, go-vet, go-lint]
-    uses: ./.github/workflows/snap-build.yaml
-  # snap-publish:
-  #   if: github.ref_name == 'main'
-  #   needs: [snap-build]
-  #   uses: ./.github/workflows/snap-publish.yaml
-  #   secrets: inherit

.github/workflows/release.yaml

@@ -0,0 +1,30 @@
+name: Release workflow
+
+permissions:
+  contents: read
+  packages: write
+  security-events: write
+
+on:
+  push:
+    tags:
+      - 'v*'
+  release:
+    types: [published]
+
+jobs: 
+  rock-build:
+    uses: ./.github/workflows/rock-build.yaml
+  rock-scan:
+    needs: [rock-build]
+    uses: ./.github/workflows/rock-scan.yaml
+  rock-publish:
+    needs: [rock-build]
+    uses: ./.github/workflows/rock-publish.yaml
+    secrets: inherit
+  snap-build:
+    uses: ./.github/workflows/snap-build.yaml
+  snap-publish:
+    needs: [snap-build]
+    uses: ./.github/workflows/snap-publish.yaml
+    secrets: inherit