.github/workflows/main-branch.yaml

@@ -0,0 +1,23 @@
+name: release
+
+on:
+  push:
+    # run only against tags
+    branches: 
+      - main
+
+permissions:
+  contents: write
+  packages: write
+  # issues: write
+
+jobs:
+  build:
+    uses: ./.github/workflows/build.yaml
+    secrets: inherit
+
+  integration-tests:
+    needs: build
+    uses: ./.github/workflows/test.yaml
+    secrets: inherit
+

.github/workflows/pull-request.yaml

@@ -24,8 +24,13 @@ jobs:
         if: github.event.pull_request.user.login != 'dependabot[bot]'
         uses: ./.github/actions/lint-commit
 
-  test:
+  build:
     needs:
       - commitlint
+    uses: ./.github/workflows/build.yaml
+    secrets: inherit
+
+  test:
+    needs: build
     uses: ./.github/workflows/test.yaml
     secrets: inherit

.github/workflows/release.yaml

@@ -12,7 +12,12 @@ permissions:
   # issues: write
 
 jobs:
+  build:
+    uses: ./.github/workflows/build.yaml
+    secrets: inherit
+
   integration-tests:
+    needs: build
     uses: ./.github/workflows/test.yaml
     secrets: inherit
 

.github/workflows/test.yaml

@@ -1,17 +1,11 @@
 name: test
 
 on:
-  push:
-    branches: ["main"]
   workflow_call: {}
 
 
 jobs:
-  build:
-    uses: ./.github/workflows/build.yaml
-    secrets: inherit
   test:
-    needs: build
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4