From 09dac79c2b1d552fcc5a35383108f6ae6015d7ed Mon Sep 17 00:00:00 2001
From: Ryan VanGundy <ryan.vangundy+rmvangun@gmail.com>
Date: Fri, 25 Jul 2025 14:47:37 -0400
Subject: [PATCH] ci(publish): Publish "latest" tag from main

The main branch will now always publish an OCI artifact tagged with `latest`.
---
 .github/workflows/ci.yaml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 9042f262b..5f5d59252 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -186,7 +186,7 @@ jobs:
   publish:
     name: Publish OCI Package
     runs-on: ubuntu-latest
-    if: startsWith(github.ref, 'refs/tags/v')
+    if: startsWith(github.ref, 'refs/tags/v') || github.ref == 'refs/heads/main'
     steps:
       - name: Checkout code
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
@@ -209,3 +209,10 @@ jobs:
           TAG: ${{ github.ref_name }}
         run: |
           windsor push oci://ghcr.io/windsorcli/core:${TAG}
+
+      - name: Publish Latest Tag
+        if: github.ref == 'refs/heads/main'
+        env:
+          TAG: latest
+        run: |
+          windsor push oci://ghcr.io/windsorcli/core:${TAG}