Update build-and-push.yaml for docker compliance and pr push (#7)

* Update build-and-push.yaml for docker compliance

.github/workflows/build-and-push.yaml

@@ -2,6 +2,8 @@ on:
   push:
     branches:
       - "main"
+    tags:
+      - "v*.*.*"
 
 env:
   REGISTRY_IMAGE: samirtahir91076/github-app-operator
@@ -30,6 +32,12 @@ jobs:
         uses: docker/metadata-action@v5
         with:
           images: ${{ env.REGISTRY_IMAGE }}
+          tags: |
+            type=ref,event=branch
+            type=semver,pattern={{version}}
+            type=semver,pattern={{major}}.{{minor}}
+            type=semver,pattern={{major}}
+            type=sha
       -
         name: Set up QEMU
         uses: docker/setup-qemu-action@v3
@@ -48,9 +56,12 @@ jobs:
         uses: docker/build-push-action@v5
         with:
           context: .
+          provenance: mode=max
+          sbom: true
+          tags: ${{ steps.meta.outputs.tags }}
           platforms: ${{ matrix.platform }}
           labels: ${{ steps.meta.outputs.labels }}
-          outputs: type=image,name=${{ env.REGISTRY_IMAGE }},push-by-digest=true,name-canonical=true,push=true
+          outputs: type=image,name=${{ env.REGISTRY_IMAGE }},push=true
       -
         name: Export digest
         run: |