From 1c16e1db87b56c8c03e49970888a258de9806aec Mon Sep 17 00:00:00 2001
From: Andy Bavier <andybavier@gmail.com>
Date: Tue, 27 Jan 2026 17:14:12 -0700
Subject: [PATCH 1/3] Remove login from docker-push target

Signed-off-by: Andy Bavier <andybavier@gmail.com>
---
 Makefile | 8 --------
 1 file changed, 8 deletions(-)

diff --git a/Makefile b/Makefile
index 660ee283..9a96543a 100644
--- a/Makefile
+++ b/Makefile
@@ -87,14 +87,6 @@ images: aether-roc-gui-docker
 docker-build: aether-roc-gui-docker
 
 docker-push: # push to docker registy: use DOCKER_REGISTRY, DOCKER_REPOSITORY and DOCKER_TAG to customize
-ifdef DOCKER_USER
-ifdef DOCKER_PASSWORD
-	echo ${DOCKER_PASSWORD} | docker login -u ${DOCKER_USER} --password-stdin
-else
-	@echo "DOCKER_USER is specified but DOCKER_PASSWORD is missing"
-	@exit 1
-endif
-endif
 	docker push ${DOCKER_IMAGENAME}
 
 kind-only:

From 39371db1002fee470f05614c0f06cf68bc43aa7f Mon Sep 17 00:00:00 2001
From: Andy Bavier <andybavier@gmail.com>
Date: Tue, 27 Jan 2026 17:17:51 -0700
Subject: [PATCH 2/3] Enable manual workflow trigger for testing

Signed-off-by: Andy Bavier <andybavier@gmail.com>
---
 .github/workflows/master.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index 1bac3771..3b672a6b 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -7,6 +7,7 @@ on:
     branches:
       - master
   pull_request:
+  workflow_dispatch: # manual trigger
 
 jobs:
 

From 9ec26d638ea6529f75c9d597aff178960beee3f6 Mon Sep 17 00:00:00 2001
From: Andy Bavier <andybavier@gmail.com>
Date: Tue, 27 Jan 2026 17:29:07 -0700
Subject: [PATCH 3/3] Publish image workflow

Signed-off-by: Andy Bavier <andybavier@gmail.com>
---
 .github/workflows/master.yml |  1 -
 .github/workflows/push.yml   | 46 ++++++++++++++++++++++++++++++++++++
 2 files changed, 46 insertions(+), 1 deletion(-)
 create mode 100644 .github/workflows/push.yml

diff --git a/.github/workflows/master.yml b/.github/workflows/master.yml
index 3b672a6b..1bac3771 100644
--- a/.github/workflows/master.yml
+++ b/.github/workflows/master.yml
@@ -7,7 +7,6 @@ on:
     branches:
       - master
   pull_request:
-  workflow_dispatch: # manual trigger
 
 jobs:
 
diff --git a/.github/workflows/push.yml b/.github/workflows/push.yml
new file mode 100644
index 00000000..c65724e4
--- /dev/null
+++ b/.github/workflows/push.yml
@@ -0,0 +1,46 @@
+# SPDX-License-Identifier: Apache-2.0
+# Copyright 2024 Intel Corporation
+# Copyright 2025 Canonical Ltd.
+name: Release Pipeline
+
+on:
+  push:
+    branches:
+      - master
+    paths:
+      - "VERSION"
+
+permissions:
+  contents: read
+
+jobs:
+  # Tag GitHub Release
+  # The convention is to prefix the version with a 'v', e.g., v1.2.3
+  tag-github:
+    uses: onosproject/.github/.github/workflows/tag-github.yml@main
+    with:
+      add_v: true
+    secrets: inherit
+
+  # Build and Release Docker Image
+  # The convention is to use the same tag for the Docker image as the GitHub Release
+  release-image:
+    needs: tag-github
+    if: needs.tag-github.outputs.changed == 'true'
+    permissions:
+      contents: read
+      packages: write
+      actions: read
+      id-token: write
+      attestations: write
+    uses: onosproject/.github/.github/workflows/release-image.yml@main
+    with:
+      docker_tag: ${{ needs.tag-github.outputs.version }}
+    secrets: inherit
+
+  # Bump Version
+  update-version:
+    needs: tag-github
+    if: needs.tag-github.outputs.changed == 'true'
+    uses: onosproject/.github/.github/workflows/bump-version.yml@main
+    secrets: inherit