feat: orchestract pull request CI from one file

.github/workflows/lint-go.yaml

@@ -1,10 +1,6 @@
 name: Lint
 
 on:
-  push:
-    branches:
-      - master
-  pull_request:
   workflow_call:
 
 permissions:

.github/workflows/on-pull-request.yaml

@@ -0,0 +1,33 @@
+name: Pull Request CI
+
+on:
+  pull_request:
+    branches:
+      - master
+
+jobs:
+
+  run-unit-tests:
+    name: Run Unit Tests
+    uses: ./.github/workflows/test.yaml
+
+  lint:
+    name: Lint
+    uses: ./.github/workflows/lint-go.yaml
+
+  # This doesn't publish the image, it just tests the publishing workflow (build the image / tags / labels)
+  test-docker-publish:
+    name: Test Docker Publish
+    uses: ./.github/workflows/publish-docker-image.yaml
+    secrets: inherit
+    needs:
+      - run-unit-tests
+      - lint
+    permissions:
+      contents: read
+      packages: write
+    with:
+      images: |
+        ghcr.io/${{ github.repository }}
+      tags: |
+        type=raw,value=${{ github.ref }}-${{ github.sha }}

.github/workflows/publish-docker-images.yaml

@@ -67,7 +67,7 @@ jobs:
         with:
           context: .
           platforms: linux/amd64,linux/arm64
-          push: true
+          push: ${{ github.event_name != 'pull_request' }}
           provenance: false
           tags: ${{ steps.meta.outputs.tags }}
           labels: ${{ steps.meta.outputs.labels }}

.github/workflows/test.yaml

@@ -1,9 +1,6 @@
 name: Unit Tests
 
 on:
-  pull_request:
-    branches:
-      - master
   workflow_call:
 
 jobs: