chore: synchronized gha with frontend project

Author: n3rdc4ptn

.github/workflows/build.yml

@@ -1,16 +1,6 @@
 name: Build
 on:
-  push:
-    branches:
-      - main
-    tags:
-      - "*"
-
-  pull_request:
-    branches:
-      - main
-
-  workflow_dispatch:
+  workflow_call:
 
 env:
   DOCKER_IMAGE: ghcr.io/${{ github.repository }}
@@ -27,53 +17,17 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 #v4.2.2
 
-      - name: Docker meta
-        id: meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 #v5.7.0
-        with:
-          # list of Docker images to use as base name for tags
-          images: |
-            ${{ env.DOCKER_IMAGE }}
-          # generate Docker tags based on the following events/attributes
-          tags: |
-            type=schedule
-            type=ref,event=branch
-            type=ref,event=pr
-            type=semver,pattern={{version}}
-            type=semver,pattern={{major}}.{{minor}}
-            type=semver,pattern={{major}}
-            type=raw,value=latest,enable={{is_default_branch}}
-
-      - name: Login to Docker Registry
-        if: github.event_name != 'pull_request'
-        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 #v3.4.0
+      - uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 #v5.5.0
         with:
-          registry: ghcr.io
-          username: ${{ github.repository_owner }}
-          password: ${{ secrets.GITHUB_TOKEN }}
-
-      - name: Set up QEMU
-        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 #v3.6.0
+          go-version: "1.23"
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 #v3.10.0
+      - run: go mod download
+      - run: go build -o mcp-ui-backend cmd/server/main.go
+        env:
+          CGO_ENABLED: 0
 
-      - name: Build and push
-        uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 #v6.16.0
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 #v4.6.2
         with:
-          context: .
-          platforms: linux/amd64,linux/arm64
-          push: ${{ github.event_name != 'pull_request' }}
-          tags: ${{ steps.meta.outputs.tags }}
-          labels: ${{ steps.meta.outputs.labels }}
-          cache-from: type=gha
-          cache-to: type=gha,mode=max
-
-      # Only for public repositories
-      # - name: Attest
-      #   uses: actions/attest-build-provenance@v1
-      #   id: attest
-      #   with:
-      #     subject-name: ghcr.io/${{ github.repository }}
-      #     subject-digest: ${{ steps.push.outputs.digest }}
-      #     push-to-registry: true
+          name: mcp-ui-backend-binary
+          path: mcp-ui-backend
+          if-no-files-found: error

.github/workflows/on-pr.yml

@@ -0,0 +1,12 @@
+name: On Pull Request
+permissions:
+  contents: read
+on:
+  pull_request:
+    types:
+      - opened
+      - synchronize
+
+jobs:
+  build:
+    uses: ./.github/workflows/build.yaml

.github/workflows/on-release.yml

@@ -0,0 +1,76 @@
+name: Release
+
+on:
+  workflow_dispatch:
+    inputs:
+      nextVersion:
+        description: "specify the release version in the semver format v[major].[minor].[patch] e.g. v0.0.0"
+        required: true
+
+permissions:
+  contents: read
+
+env:
+  REGISTRY: ghcr.io/openmcp-project
+  IMAGE_NAME: mcp-ui-backend
+
+jobs:
+  release:
+    runs-on: ubuntu-latest
+    needs:
+      - run-build
+    permissions:
+      contents: write
+      packages: write
+      id-token: write
+      attestations: write
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        with:
+          fetch-depth: 0 # Fetch all history for all tags and branches
+
+      - name: Check if tag already exists
+        id: check_tag
+        run: |
+          if git rev-parse ${{ github.event.inputs.nextVersion }} >/dev/null 2>&1
+          then
+            echo "Tag ${{ github.event.inputs.nextVersion }} already exists."
+            exit 1
+          else
+            echo "Tag does not exit. Building release version ${{ github.event.inputs.nextVersion }}"
+          fi
+
+      - name: Log in to the Container registry
+        uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
+        with:
+          registry: ${{ env.REGISTRY }}
+          username: ${{ github.actor }}
+          password: ${{ secrets.GITHUB_TOKEN }}
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 #v3.6.0
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 #v3.10.0
+
+      - name: Build and push
+        uses: docker/build-push-action@14487ce63c7a62a4a324b0bfb37086795e31c6c1 #v6.16.0
+        with:
+          context: .
+          platforms: linux/amd64,linux/arm64
+          push: true
+          sbom: true
+          provenance: mode=max
+          tags: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}latest,${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}:${{ github.event.inputs.nextVersion }}
+          cache-from: type=gha
+          cache-to: type=gha,mode=max
+
+      - name: Create Release with autogenerated release notes
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh release create ${{ github.event.inputs.nextVersion }} \
+            --generate-notes \
+            --target ${{ github.sha }}