Use experimental Docker builder for proper versioning

Author: mback2k

.github/workflows/docker.yml

@@ -1,17 +1,31 @@
 name: Docker
 
+permissions:
+  contents: read
+
 on:
   push:
-    branches: [ main ]
+    branches:
+      - 'main'
+    tags:
+      - '4.*'
+  pull_request:
 
 jobs:
-  build-and-push:
-    runs-on: ubuntu-latest
-
-    name: Container Image
-    steps:
-      - uses: actions/checkout@v4
-      - uses: mback2k/action-docker-package@master
-        with:
-          registry_username: ${{ github.repository_owner }}
-          registry_password: ${{ secrets.GITHUB_TOKEN }}
+  build:
+    uses: docker/github-builder-experimental/.github/workflows/build.yml@main
+    permissions:
+      contents: read # to fetch the repository content
+      id-token: write # for signing attestation(s) with GitHub OIDC Token
+    with:
+      output: image
+      push: ${{ github.event_name != 'pull_request' }}
+      platforms: linux/amd64,linux/arm64
+      build-args: |
+        version=${{ fromJSON(steps.meta.outputs.json).labels['org.opencontainers.image.version'] }}
+      meta-images: |
+        ghcr.io/${{ github.repository }}
+      meta-tags: |
+        type=pep440,pattern={{version}}
+        type=ref,event=branch
+        type=ref,event=pr