ci: github workflow extract release tag from shard.yml

.github/workflows/publish.yml

@@ -14,26 +14,29 @@ jobs:
     permissions:
       packages: write
       contents: read
-      attestations: write
       id-token: write
     steps:
       - name: Checkout
         uses: actions/checkout@v4
+
       - name: Set up QEMU
         uses: docker/setup-qemu-action@v2
+
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v2
+
       - name: Login to Docker Hub
         uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
-      - name: Extract version tag
-        id: extract_tag
+
+      - name: Extract version from shard.yml
+        id: extract_version
         run: |
-          if [ "${{ github.event_name }}" == "release" ]; then
-            echo "RELEASE_TAG=${GITHUB_REF#refs/tags/}" >> $GITHUB_ENV
-          fi
+          VERSION=$(grep -oP 'version:\s*\K\S+' shard.yml)
+          echo "RELEASE_TAG=$VERSION" >> $GITHUB_ENV
+
       - name: Build and push image
         id: push
         uses: docker/build-push-action@v5.0.0
@@ -44,6 +47,7 @@ jobs:
           tags: |
             sjdonado/bit:latest
             ${{ github.event_name == 'release' && 'sjdonado/bit:${{ env.RELEASE_TAG }}' || '' }}
+
       - name: Attest
         uses: actions/attest-build-provenance@v1
         id: attest