chore: split build-push to re-usable workflow

Author: rjaegers

.github/workflows/build-push.yml

@@ -2,15 +2,7 @@
 name: Build & Push
 
 on:
-  merge_group:
-  pull_request:
-  push:
-    tags: ["v*.*.*"]
-  workflow_dispatch:
-
-concurrency:
-  group: ${{ github.ref }}-${{ github.workflow }}
-  cancel-in-progress: true
+  workflow_call:
 
 permissions:
   contents: read
@@ -125,7 +117,7 @@ jobs:
           images: ${{ env.REGISTRY }}/${{ github.repository }}-${{ matrix.flavor }}
           # Generate Docker tags based on the following events/attributes
           tags: |
-            type=raw,value=latest,enable={{is_default_branch}}
+            type=edge
             type=ref,event=pr
             type=semver,pattern={{raw}}
             type=semver,pattern={{version}}
@@ -196,43 +188,3 @@ jobs:
           UPDATED_NOTES=${UPDATED_NOTES//'{{ amp-devcontainer-${{ matrix.flavor }}-version }}'/'${{ github.ref_name }}'}
           UPDATED_NOTES=${UPDATED_NOTES//'{{ amp-devcontainer-${{ matrix.flavor }}-sha }}'/'${{ steps.inspect-manifest.outputs.digest }}'}
           gh release edit ${{ github.ref_name }} --notes "${UPDATED_NOTES}"
-
-  integration-test:
-    if: github.event_name == 'pull_request'
-    strategy:
-      matrix:
-        flavor: [cpp, rust]
-        runner: ["ubuntu-latest", "ubuntu-24.04-arm"]
-    needs: merge-image
-    secrets: inherit
-    uses: ./.github/workflows/integration-test.yml
-    with:
-      flavor: ${{ matrix.flavor }}
-      runner: ${{ matrix.runner }}
-
-  acceptance-test:
-    if: github.event_name == 'pull_request'
-    needs: merge-image
-    secrets: inherit
-    uses: ./.github/workflows/acceptance-test.yml
-    with:
-      flavor: cpp
-
-  publish-test-results:
-    runs-on: ubuntu-latest
-    permissions:
-      checks: write
-      pull-requests: write
-    needs: [acceptance-test, integration-test]
-    if: always()
-    steps:
-      - uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
-        with:
-          egress-policy: audit
-      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
-        with:
-          merge-multiple: true
-          pattern: test-results-*
-      - uses: EnricoMi/publish-unit-test-result-action@3a74b2957438d0b6e2e61d67b05318aa25c9e6c6 # v2.20.0
-        with:
-          files: test-report-*.xml

.github/workflows/continuous-integration.yml

@@ -0,0 +1,60 @@
+---
+name: Continuous Integration
+
+on:
+  merge_group:
+  pull_request:
+  push:
+    branches: [main]
+    tags: ["v*.*.*"]
+  workflow_dispatch:
+
+concurrency:
+  group: ${{ github.ref }}-${{ github.workflow }}
+  cancel-in-progress: true
+
+permissions:
+  contents: read
+
+jobs:
+  build-push:
+    uses: ./.github/workflows/build-push.yml
+    secrets: inherit
+
+  integration-test:
+    strategy:
+      matrix:
+        flavor: [cpp, rust]
+        runner: ["ubuntu-latest", "ubuntu-24.04-arm"]
+    needs: build-push
+    uses: ./.github/workflows/integration-test.yml
+    secrets: inherit
+    with:
+      flavor: ${{ matrix.flavor }}
+      runner: ${{ matrix.runner }}
+
+  acceptance-test:
+    needs: build-push
+    uses: ./.github/workflows/acceptance-test.yml
+    secrets: inherit
+    with:
+      flavor: cpp
+
+  publish-test-results:
+    runs-on: ubuntu-latest
+    permissions:
+      checks: write
+      pull-requests: write
+    needs: [acceptance-test, integration-test]
+    if: always()
+    steps:
+      - uses: step-security/harden-runner@0634a2670c59f64b4a01f0f96f84700a4088b9f0 # v2.12.0
+        with:
+          egress-policy: audit
+      - uses: actions/download-artifact@d3f86a106a0bac45b974a628896c90dbdf5c8093 # v4.3.0
+        with:
+          merge-multiple: true
+          pattern: test-results-*
+      - uses: EnricoMi/publish-unit-test-result-action@3a74b2957438d0b6e2e61d67b05318aa25c9e6c6 # v2.20.0
+        with:
+          files: test-report-*.xml