feat: streamline container build workflow by removing unnecessary steps and using pipeline token for GitHub authentication

Author: KristjanESPERANTO

.github/workflows/container-build.yaml

@@ -16,39 +16,34 @@ jobs:
   build:
     runs-on: ubuntu-latest
     timeout-minutes: 60
+    env:
+      IMAGE_TAG: ghcr.io/${{ github.repository }}:${{ github.ref_name }}
     steps:
       - name: Checkout code
         uses: actions/checkout@v5
 
-      - name: Derive image coordinates
-        id: meta
-        run: |
-          set -euo pipefail
-          repo="${GITHUB_REPOSITORY,,}"
-          ref="${GITHUB_REF_NAME}"
-          sanitized_ref=$(echo "${ref}" | tr '[:upper:]' '[:lower:]' | sed 's#[^a-z0-9_.-]#-#g')
-          echo "image=ghcr.io/${repo}:${sanitized_ref}" >> "$GITHUB_OUTPUT"
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-
       - name: Log in to GitHub Container Registry
         uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
+      - name: Ensure pipeline token is configured
+        run: |
+          set -euo pipefail
+          if [ -z "${{ secrets.PIPELINE_GITHUB_TOKEN }}" ]; then
+            echo "Set the PIPELINE_GITHUB_TOKEN secret with a classic PAT that has at least public_repo scope." >&2
+            exit 1
+          fi
+
       - name: Build and push image
         uses: docker/build-push-action@v6
         with:
           context: .
           file: container/Dockerfile
           push: true
           platforms: linux/amd64
-          # Optionally replace secrets.GITHUB_TOKEN with a PAT (use the same
-          # secret name or adjust this mapping) to avoid API rate limits when
-          # the pipeline fetches data for many repositories.
           secrets: |
-            github_token=${{ secrets.GITHUB_TOKEN }}
-          tags: ${{ steps.meta.outputs.image }}
+            github_token=${{ secrets.PIPELINE_GITHUB_TOKEN }}
+          tags: ${{ env.IMAGE_TAG }}