ci(builder): CI uses different context for build (#157)

* ci(builder): CI uses different context for build

* fix: only push/verify on ublue-builder change + fix TAGS

* ci: lower case u for ublue

.github/workflows/builder.yml

@@ -1,4 +1,4 @@
-name: Build Ublue Builder
+name: Build ublue-builder
 on:
   workflow_dispatch: # allow manually triggering builds
   pull_request:
@@ -7,8 +7,8 @@ on:
   push:
     branches:
       - main
-    paths-ignore: # don't rebuild on documentation change
-      - '**.md'
+    paths:
+      - 'ublue-builder/*'
   schedule:
     - cron: '0 0 * * TUE'
 
@@ -95,9 +95,11 @@ jobs:
           COSIGN_EXPERIMENTAL: 1
 
       - name: Verify the pushed tags
+        if: github.event_name != 'pull_request'
         run: |
           cosign verify ${{ steps.registry_case.outputs.lowercase}}/${{ env.IMAGE_NAME }}@${TAGS} --certificate-identity-regexp "https://github.com/${{ github.repository }}" --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
         env:
+          TAGS: ${{ steps.push.outputs.digest }}
           COSIGN_EXPERIMENTAL: 1
 
       - name: Echo outputs

ublue-builder/Containerfile

@@ -1,6 +1,6 @@
 FROM registry.fedoraproject.org/fedora:latest
 
-COPY mock-wrapper /usr/bin
+COPY ublue-builder/mock-wrapper /usr/bin
 
 RUN dnf install -y mock rpmdevtools rpkg && dnf clean all