Fix passing the tag to build-args

Signed-off-by: galal-hussein <[email protected]>

.github/workflows/build.yml

@@ -27,6 +27,8 @@ jobs:
         push: false
         tags: rancher/hardened-whereabouts:${{ env.TAG }}-amd64
         file: Dockerfile
+        build-args: |
+          TAG=${{ env.TAG }}
 
     - name: Run Trivy vulnerability scanner
       uses: aquasecurity/[email protected]
@@ -68,3 +70,5 @@ jobs:
         file: Dockerfile
         outputs: type=docker
         platforms: linux/arm64
+        build-args: |
+          TAG=${{ env.TAG }}

.github/workflows/image-push.yml

@@ -5,6 +5,9 @@ on:
 permissions:
   contents: read  
 
+env:
+  GITHUB_ACTION_TAG: ${{ github.ref_name }}
+
 jobs:
   push-multiarch:
     permissions:
@@ -15,6 +18,11 @@ jobs:
     - name: Check out code
       uses: actions/checkout@v4
 
+    - name: Set the TAG value
+      id: get-TAG
+      run: |
+        echo "$(make -s log | grep TAG)" >> "$GITHUB_ENV"
+        
     - name: Set up QEMU
       uses: docker/setup-qemu-action@v3
 
@@ -42,3 +50,5 @@ jobs:
         tags: rancher/hardened-whereabouts:${{ github.event.release.tag_name }}
         file: Dockerfile
         platforms: linux/amd64, linux/arm64
+        build-args: |
+          TAG=${{ env.TAG }}

Makefile

@@ -14,7 +14,11 @@ BUILD_META=-build$(shell date +%Y%m%d)
 ORG ?= rancher
 PKG ?= github.com/k8snetworkplumbingwg/whereabouts
 SRC ?= github.com/k8snetworkplumbingwg/whereabouts
-TAG ?= v0.7.0$(BUILD_META)
+TAG ?= ${GITHUB_ACTION_TAG}
+
+ifeq ($(TAG),)
+TAG := v0.7.0$(BUILD_META)
+endif
 
 ifeq (,$(filter %$(BUILD_META),$(TAG)))
 $(error TAG $(TAG) needs to end with build metadata: $(BUILD_META))
@@ -45,7 +49,7 @@ image-scan:
 PHONY: log
 log:
 	@echo "ARCH=$(ARCH)"
-	@echo "TAG=$(TAG)"
+	@echo "TAG=$(TAG:$(BUILD_META)=)"
 	@echo "ORG=$(ORG)"
 	@echo "PKG=$(PKG)"
 	@echo "SRC=$(SRC)"