feat: Support covenant_signer publishing

.github/workflows/publish.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - 'main'
+      - 'hiep/signer-build'
     tags:
       - '*'
 
@@ -53,3 +54,19 @@ jobs:
       - name: Run Gosec (covenant-signer)
         working-directory: ./covenant-signer
         run: gosec ./...
+
+  docker_pipeline_covenant_signer:
+    needs: ["go_sec_covenant_signer"]
+    uses: babylonlabs-io/.github/.github/workflows/[email protected]
+    secrets: inherit
+    with:
+      publish: true
+      dockerfile: ./covenant-signer/Dockerfile
+      dockerContext: ./covenant-signer 
+      repoName: covenant-signer
+      docker_scan: true
+    permissions:
+      # required for all workflows
+      security-events: write
+      # required to fetch internal or private CodeQL packs
+      packages: read