take 2

.github/workflows/docker-build-publish.yaml

@@ -28,6 +28,7 @@ jobs:
     steps:
       - id: step1
         run: |
+          # https://stackoverflow.com/questions/70693375/how-to-output-the-latest-version-of-a-pip-package
           VERSION=`python -m pip install --upgrade ghidriff== 2>&1 | grep "from versions:" | sed "s/^.*from versions: \(.*\))/\1/" | awk -F ", " '{print $NF}'`
           echo $VERSION
           echo "version=$VERSION" >> "$GITHUB_OUTPUT"
@@ -76,7 +77,9 @@ jobs:
         uses: docker/metadata-action@96383f45573cb7f253c731d3b3ab81c87ef81934 # v5.0.0
         with:
           images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
-          tags: type=semver,pattern=${{needs.get-ver.outputs.version}}
+          tags: |
+            latest
+            ${{needs.get-ver.outputs.version}}
 
       # Build and push Docker image with Buildx (don't push on PR)
       # https://github.com/docker/build-push-action
@@ -90,7 +93,7 @@ jobs:
           labels: ${{ steps.meta.outputs.labels }}
           cache-from: type=gha
           cache-to: type=gha,mode=max
-          platforms: linux/amd64,linux/arm64
+          platforms: linux/amd64,linux/arm64          
 
       # Sign the resulting Docker image digest except on PRs.
       # This will only write to the public Rekor transparency log when the Docker