Merge pull request #3 from codetent/harden

extract metadata using action

Author: codetent

.github/workflows/build-dev.yml

@@ -18,10 +18,18 @@ jobs:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
+      - name: Extract metadata for image
+        id: meta
+        uses: docker/metadata-action@v5
+        with:
+          images: ghcr.io/${{ github.repository }}/dev
+          tags: |
+            type=sha
       - name: Build & push image
         uses: docker/build-push-action@v6
         with:
           context: .
           file: .devcontainer/Dockerfile
-          tags: ghcr.io/${{ github.repository }}/dev:${{ github.sha }}
+          tags: ${{ steps.meta.outputs.tags }}
+          labels: ${{ steps.meta.outputs.labels }}
           push: true