ci: test bake reusable workflow

Signed-off-by: David Karlsson <[email protected]>

Author: dvdksn

.github/workflows/build.yml

@@ -38,24 +38,20 @@ jobs:
           targets: releaser-build
 
   build:
+    uses: docker/github-builder-experimental/.github/workflows/bake.yml@main
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
+    with:
+      output: local
+      target: release
+
+  check-cloudfront:
     runs-on: ubuntu-24.04
     needs:
       - releaser
     steps:
-      -
-        name: Checkout
-        uses: actions/checkout@v5
-      -
-        name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
-      -
-        name: Build
-        uses: docker/bake-action@v6
-        with:
-          source: .
-          files: |
-            docker-bake.hcl
-          targets: release
       -
         name: Check Cloudfront config
         uses: docker/bake-action@v6
@@ -70,6 +66,10 @@ jobs:
 
   validate:
     runs-on: ubuntu-24.04
+    permissions:
+      contents: read
+      packages: write
+      id-token: write
     strategy:
       fail-fast: false
       matrix:
@@ -90,13 +90,19 @@ jobs:
         name: Set up Docker Buildx
         uses: docker/setup-buildx-action@v3
       -
-        name: Validate
-        uses: docker/bake-action@v6
+        uses: docker/github-builder-experimental/.github/workflows/bake.yml@main
+        id: exec
         with:
-          source: .
-          files: |
-            docker-bake.hcl
-          targets: ${{ matrix.target }}
+          output: local
+          target: ${{ matrix.target }}
+          artifact-name: ${{ matrix.target }}
+      -
+        name: Download vale output
+        if: ${{ matrix.target == 'vale' && github.event_name == 'pull_request' }}
+        uses: actions/download-artifact@v6
+        with:
+          name: ${{ matrix.target }}
+          path: ./vale-output
       -
         name: Install reviewdog
         if: ${{ matrix.target == 'vale' && github.event_name == 'pull_request' }}
@@ -105,6 +111,6 @@ jobs:
         name: Run reviewdog for vale
         if: ${{ matrix.target == 'vale' && github.event_name == 'pull_request' }}
         run: |
-          cat ./tmp/vale.out | reviewdog -f=rdjsonl -name=vale -reporter=github-pr-annotations -fail-on-error=false -filter-mode=added -level=info -fail-level=warning
+          cat /vale-output/vale.out | reviewdog -f=rdjsonl -name=vale -reporter=github-pr-annotations -fail-on-error=false -filter-mode=added -level=info -fail-level=warning
         env:
           REVIEWDOG_GITHUB_API_TOKEN: ${{ secrets.GITHUB_TOKEN }}

docker-bake.hcl

@@ -33,6 +33,7 @@ target "release" {
   args = {
     HUGO_ENV = HUGO_ENV
     DOCS_URL = DOCS_URL
+    BUILDKIT_CONTEXT_KEEP_GIT_DIR = 1
   }
   target = "release"
   output = [DOCS_SITE_DIR]