From 5ce2b4ad2893863b4a7b956b4a82ed4ad9599695 Mon Sep 17 00:00:00 2001
From: techfg <barry@techfg.com>
Date: Tue, 4 Feb 2025 23:25:37 -0800
Subject: [PATCH] chore: restrict latest tag to v#.#.# tags only (#4566)

---
 .github/workflows/release.yaml | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index d13416e4eb..48fa0f24a4 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -63,7 +63,10 @@ jobs:
 
           echo "Pushing tag $GHCR_IMAGE_TAG_BASE to Github Container Registry..."=
           docker tag $ECR_SHA_TAG $GHCR_IMAGE_TAG_BASE:$RELEASE_TAG
-          docker tag $ECR_SHA_TAG $GHCR_IMAGE_TAG_BASE:latest
+          # Only tag latest if v#.#.# (e.g., not a pre-release/beta/etc.)
+          if [[ "$RELEASE_TAG" =~ ^v([0-9]+)\.([0-9]+)\.([0-9]+)$ ]]; then
+            docker tag $ECR_SHA_TAG $GHCR_IMAGE_TAG_BASE:latest
+          fi
           docker push --all-tags $GHCR_IMAGE_TAG_BASE
 
   cli_release_artifacts: